SUSE CVE-2026-64242

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

PT-2026-64566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the usb gadget f printer component. The printer open function increments the dev-kref variable regardless of whether the open operation is successful. When the...

PT-2026-64641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel within the cros ec multi-function device mfd component. If the ec device probe function fails, the cros ec class release function releas...

PT-2026-64491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the mms114 interrupt function. The function reads touch data from a device into a fixed-size on-stack buffer touch that holds 80 bytes. Because the...

PT-2026-64695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio mig get next state function where the loop used to skip unsupported optional states does not account for the VFIO DEVICE STATE ERROR sentinel. When a blocked...

PT-2026-64485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fuse-uring component where the fuse uring commit function incorrectly handles failures during memory copying. When copy from user fails, it returns a positive...

PT-2026-64621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A path traversal bypass exists in the ksmbd component. The ksmbd vfs path lookup function uses LOOKUP BENEATH to restrict path resolution to the share root. While vfs path parent lookup...

PT-2026-64634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation...

Linux Distros Unpatched Vulnerability : CVE-2026-64461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtkpcieenableport fails, mtkpcieportfree removes the port from pcie-ports and frees the port...

Linux Distros Unpatched Vulnerability : CVE-2026-64400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: prevent path traversal bypass by restricting caseless retry ksmbdvfspathlookup enforces LOOKUPBENEATH to restrict path resolution within the share root...

Linux Distros Unpatched Vulnerability : CVE-2026-64255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mld: validate stamask before ffs in BA session handlers Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID without checki...

Linux Distros Unpatched Vulnerability : CVE-2026-64470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe...

PT-2026-64535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the chachapoly create function where it fails to validate the second template argument when the compatibility poly1305 parameter is used in the template name. The...

PT-2026-64685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the xhci sideband component. The function xhci ring to sgtable allocates a temporary pages array to construct an sg table using sg alloc table from pages. While...

PT-2026-64738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the error path of the xe gsc init post hwconfig function. The function explicitly frees a Buffer Object BO allocated with xe managed bo create pin map using...

PT-2026-64724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kxsd9 write raw function where a runtime Power Management PM reference is acquired using pm runtime get sync but is not released when a scale with a non-zero integ...

PT-2026-64714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the mpl115 read raw function. The function acquires a runtime PM reference using pm runtime get sync before reading pressure or temperature...

PT-2026-64529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto ccp component where the system improperly initializes SNP for the ioctlSNP VLEK LOAD function. A userspace process could potentially trigger this code path...

PT-2026-64732

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in the ACPI NFIT core. The acpi nfit probe function installs an ACPI notify handler for the NFIT device before verifying the presence of the NFIT...

PT-2026-64703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA gus component. The function snd gf1 pcm volume control fails to verify the return value of snd ctl new1, which can return NULL during memory...