The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux Distros Unpatched Vulnerability : CVE-2026-84969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a...

Linux Distros Unpatched Vulnerability : CVE-2026-84966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly...

Linux Distros Unpatched Vulnerability : CVE-2026-85024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error...

The vulnerabilities of the functions __kvm_at_s12() and __kvm_find_s1_desc_level() in the module arch/arm64/kvm/at.c of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions kvmats12 and kvmfinds1desclevel in the arch/arm64/kvm/at.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the `lowpan_iphc_mcast_ctx_addr_compress()` function in the `net/6lowpan/iphc.c` module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the lowpaniphcmcastctxaddrcompress function in the net/6lowpan/iphc.c module of the Linux kernel’s networking functions is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the nl80211_calculate_ap_params() function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernel, allows a hacker to induce a service failure.

The vulnerability of the nl80211calculateapparams function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernel, is related to error handling flaws. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the cd321x_update_work() function in the drivers/usb/typec/tipd/core.c module of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the cd321xupdatework function in the drivers/usb/typec/tipd/core.c module of the USB TypeC driver in the Linux operating system is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-86202

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ASoC SOF audio component within the sof widget setup unlocked function. If tplg ops-dai config or widget kcontrol setup fails during widget setup, the system doubl...

PT-2026-85795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer where small events on architectures with RB FORCE 8BYTE ALIGNMENT set to true report a data length 4 bytes larger than expected. This occurs because rb...

The vulnerability of the nf_tables_commit() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the nftablescommit function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the sel_open_policy() function in the security/selinux/selinuxfs.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the selopenpolicy function in the security module security/selinux/selinuxfs.c of the Linux kernel’s security subsystem is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the l2cap_ecred_reconf_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capecredreconfrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

PT-2026-85801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra crypto component where the system fails to return an ENOMEM error value when the input buffer allocation fails within the tegra ccm do one req function...

CVE-2026-85577: Improper Neutralization of Input During Web Page Generation

AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attackers to inject arbitrary JavaScript by closing the script tag with . Attackers can craft a malicious URL with an error parameter containing script breakout...

CVE-2026-85024: Uncaught Exception

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

PT-2026-85631

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nvmet fc alloc ls iodlist advances iod while initializing the LS IOD array. If an rqstbuf allocation or response buffer DMA mapping fails, the unwind loop decrements iod past the...

Linux Distros Unpatched Vulnerability : CVE-2026-80904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tls: Fail tlsswspliceread after a failed async decrypt When an async decrypt fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls...

The vulnerability of the bpf_fd_array_map_clear() function in the kernel/bpf/arraymap.c module, which supports the BPF interpreter in Linux kernels, allows a hacker to trigger a service failure.

The vulnerability of the bpffdarraymapclear function in the kernel/bpf/arraymap.c module, which supports BPF interpreter in Linux kernels, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the pex_ep_event_pex_rst_deassert() function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI core devices allows a hacker to cause a service failure.

The vulnerability of the pexepeventpexrstdeassert function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI device kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacke...