76135 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mld: validate stamask before ffs in BA session handlers Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID without checki...
Linux Distros Unpatched Vulnerability : CVE-2026-64461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtkpcieenableport fails, mtkpcieportfree removes the port from pcie-ports and frees the port...
PT-2026-64491
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114 interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114 touch touchMMS114 MAX TOUCH; which holds MMS114 MAX TOUCH 10...
PT-2026-64703
In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd gf1 pcm volume control does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...
PT-2026-64738
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the error path of the xe gsc init post hwconfig function. The function explicitly frees a Buffer Object BO allocated with xe managed bo create pin map using...
PT-2026-64529
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNP VLEK LOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEV PDH GEN...
PT-2026-64724
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write raw error kxsd9 write raw takes a runtime PM reference with pm runtime get sync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping th...
Linux Distros Unpatched Vulnerability : CVE-2026-64292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space,...
Linux Distros Unpatched Vulnerability : CVE-2026-64493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure ...
Linux Distros Unpatched Vulnerability : CVE-2026-64494
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it...
Linux Distros Unpatched Vulnerability : CVE-2026-64227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device ID...
PT-2026-64571
In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp alloc stream info cdnsp alloc stream info allocates stream info-stream ctx array with cdnsp alloc stream ctx. If a later stream ring allocation or stream mapping update fails, th...
PT-2026-64591
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do cpu nanosleep error path In do cpu nanosleep, posix cpu timer create takes a pid reference via get pid and stores it in timer.it.cpu.pid. If the subsequent posix cpu timer set call...
PT-2026-64522
In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of node refcount leak in scmi regulator probe scmi regulator probe calls of find node by name which takes a reference on the returned device node. On the error path where process scmi regulator of node fails,...
PT-2026-64538
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the isofs component when handling Rock Ridge symbolic link SL records. The functions get symlink chunk and parse rock ridge inode internal process...
PT-2026-64518
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module extend max pages module extend max pages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
PT-2026-64682
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk pcie enable port fails, mtk pcie port free removes the port from pcie-ports and frees the port structure. However, the IRQ domains set up earlier by mtk pcie...
Linux Distros Unpatched Vulnerability : CVE-2026-64447
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7isysinit and ipu7psysinit, pdata is allocated and then passed to...
Linux Distros Unpatched Vulnerability : CVE-2026-11331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error conditio...
Linux Distros Unpatched Vulnerability : CVE-2026-55991
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and...