PT-2026-61353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The css rstat updated function, exposed as a BPF kfunc, fails to validate the cpu argument provided by the caller before using it for per-cpu rstat lookups. A BPF iter/cgroup program wit...

PT-2026-61404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the adm1266 nvmem read blackbox function within the hwmon pmbus/adm1266 module. The function processes a record count value obtained from the BLACKBOX INFO response...

PT-2026-61496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the net: wwan: iosm component. The issue occurs within the ipc imem init function, where memory allocated by the ipc protocol init function is not properly freed...

PT-2026-61492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver where the iwl mld tx from txq function fails to check the mld-fw status.in hw restart flag before dequeuing frames from mac80211 and pushing them to...

PT-2026-61270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the migrate vma insert huge pmd page function. When a PMD Page Middle Directory check fails and the process jumps to unlock abort, the pag...

PT-2026-61202

In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change handle and handle delete drm gem change handle ioctl leaves the old handle live in the IDR during the window between spin unlocktable lock and the final spin locktable lock. A concurrent drm gem...

PT-2026-61178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtk-snfi SPI driver where the on-host NAND ECC engine is registered during the mtk snand probe function, but the corresponding teardown process is missing from bot...

PT-2026-61373

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net: ethernet: cortina driver within the gmac rx function. The socket buffer SKB used to assemble packets from fragments was implemented as a static local...

PT-2026-61461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth btmtk driver. The setup packet of the control urb is not properly freed when usb submit urb fails or when the submitted urb is killed. Recommendatio...

PT-2026-61336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A DMA mapping leak occurs in the nvme-pci module during data setup errors. The leak happens during iteration if the tracking descriptor for either PRP Physical Region Page or SGL Scatter...

PT-2026-61357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where the system fails to correctly extract the error code when the vfs mkdir function fails. This results in the mkdir error logic being trigger...

PT-2026-61437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the phy reply size function. This happens because phy prepare data uses kstrdup to allocate strings such as name, drvname, upstream sfp name, and...

PT-2026-61464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the pds core component during firmware reset recovery. The debugfs lookup function returns a dentry with an elevated reference count that is not released via...

PT-2026-61465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pds core component where the pdsc devcmd wait function fails to correctly handle errors, potentially returning a stale success status from the completion register...

PT-2026-61377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the netfs write begin function during error handling. Specifically, the system fails to release the reference to the request when an error is returned from the...

PT-2026-61181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf component where the visit tailcall insn function was implemented without a check for its return value, failing to propagate errors correctly. Recommendations A...

PT-2026-61369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference exists in the bio integrity map user function. This occurs because pin user pages fast may only partially succeed in pinning pages, and the bio integrity map...

PT-2026-61205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Two bugs exist in the Text-phase handler of the iSCSI target. The first issue is a buffer overread where the iscsit crc buf function reads 4 bytes past the end of the text in buffer when...

PT-2026-61326

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the ESP component of the xfrm subsystem. The xfrm state mtu function performs arithmetic in unsigned modulo-2^32 space, subtracting an...

PT-2026-61470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm component where the return value of the iommu map sgtable function is not correctly handled. Following a change where iommu map sgtable was updated to retu...