PT-2026-64628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the nxp recv fw req v3 function during v3 firmware downloads. The issue occurs because the function only verifies the lower bound of the offset provided i...

PT-2026-64634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation...

PT-2026-64641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel within the cros ec multi-function device mfd component. If the ec device probe function fails, the cros ec class release function releas...

PT-2026-64621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A path traversal bypass exists in the ksmbd component. The ksmbd vfs path lookup function uses LOOKUP BENEATH to restrict path resolution to the share root. While vfs path parent lookup...

PT-2026-64724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kxsd9 write raw function where a runtime Power Management PM reference is acquired using pm runtime get sync but is not released when a scale with a non-zero integ...

PT-2026-64757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool component where the tsconfig prepare data function calls ethnl ops begin but fails to call ethnl ops complete before returning an error. Recommendations At...

PT-2026-64535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the chachapoly create function where it fails to validate the second template argument when the compatibility poly1305 parameter is used in the template name. The...

PT-2026-64485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fuse-uring component where the fuse uring commit function incorrectly handles failures during memory copying. When copy from user fails, it returns a positive...

PT-2026-64685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the xhci sideband component. The function xhci ring to sgtable allocates a temporary pages array to construct an sg table using sg alloc table from pages. While...

Linux Distros Unpatched Vulnerability : CVE-2026-64470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe...

PT-2026-64491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the mms114 interrupt function. The function reads touch data from a device into a fixed-size on-stack buffer touch that holds 80 bytes. Because the...

PT-2026-64529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto ccp component where the system improperly initializes SNP for the ioctlSNP VLEK LOAD function. A userspace process could potentially trigger this code path...

CVE-2026-64257: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b "smb: client: restrict implied bcc0 exemption to responses without data area" restricted the implied bcc0 length exception to responses without a da...

PT-2026-64668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipu7 media staging component where double-free and use-after-free conditions occur during error handling. In the functions ipu7 isys init and ipu7 psys init, the...

PT-2026-64682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI mediatek component where an IRQ domain leak occurs when a port fails to enable. Specifically, when the function mtk pcie enable port fails, the mtk pcie port...

PT-2026-64538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the isofs component when handling Rock Ridge symbolic link SL records. The functions get symlink chunk and parse rock ridge inode internal process...

PT-2026-64715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the gp2ap002 read raw function. The function invokes pm runtime get sync to manage power before reading the lux value; however, if the gp2ap0...

PT-2026-64738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the error path of the xe gsc init post hwconfig function. The function explicitly frees a Buffer Object BO allocated with xe managed bo create pin map using...

PT-2026-64522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the scmi regulator probe function. This happens because the function calls of find node by name, which increments the reference count of the returned...

Linux Distros Unpatched Vulnerability : CVE-2026-64400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: prevent path traversal bypass by restricting caseless retry ksmbdvfspathlookup enforces LOOKUPBENEATH to restrict path resolution within the share root...