CVE-2026-53171 accel/ethosu: fix arithmetic issues in dma_length()

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix arithmetic issues in dmalength dmalength derives DMA region usage from command stream values and updates regionsize: len = len + stride0 size0 + stride1 size1 regionsizeregion = max..., len + dma-offset Several...

CVE-2026-53154 mm/hugetlb: restore reservation on error in hugetlb folio copy paths

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore reservation on error in hugetlb folio copy paths Two sites in mm/hugetlb.c allocate a hugetlb folio via allochugetlbfolio consuming a VMA reservation and then call copyuserlargefolio, which became int-returnin...

SUSE CVE-2026-52922

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadvdatforwarddata calls pskbcopyforclone to duplicate an skb for each DHT candidate, but does not check the return value before passing it to batadvsendskbprepareunicast4addr...

PT-2026-52277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the vsock/vmci component during a failed handshake. When the function vmci transport recv connecting server returns an error, the vmci transport recv listen...

PT-2026-52324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the XSK branch of the mlx5e xmit xdp buff function. When the sq-xmit xdp frame function returns false, such as when the XDPSQ is full, the system fails to unmap t...

PT-2026-52339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A failure to unlock the parent directory occurs in the nfsd4 create file function. This happens when the NFSD exports a filesystem using atomic create and that function returns an error...

PT-2026-52539

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.16 Description A scoped, non-admin user with only Create permissions can delete arbitrary files outside their assigned scope, including other tenants' data and the application database. This occurs during th...

PT-2026-52353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs during split 6 GHz scanning when the cfg80211 scan function fails. The rdev-int scan req variable is leaked because the cleanup process in cfg80211 scan done is...

ROS-20260625-73-0009

The vulnerability in gnutls relates to the swapping of a pointer with an expired validity period. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

ROS-20260625-73-0007

The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260625-73-0003

The vulnerability in gnutls is related to errors that occur when a string or array is terminated with the null character. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

ROS-20260625-73-0022

The vulnerability in Apache Kafka is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-52327

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network PHY subsystem where the sfp bus del upstream function is not called during a probe failure path. This results in the sfp-bus retaining a dangling upstream...

PT-2026-52310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mvpp2 network driver where the RX error path returns the current descriptor buffer to the hardware Buffer Manager BM pool. This action is only valid while the driv...

PT-2026-52303

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A recursive spinlock self-deadlock AA deadlock can occur on hugetlb lock when two concurrent madviseMADV HWPOISON calls are made on the same hugetlb page while racing with a concurrent...

The vulnerability of the queue_rq() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the queuerq function in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mt6370_probe() function in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the mt6370probe function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the icc_bw_set() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the iccbwset function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability in the net/sched/cls_u32.c module of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability in the net/sched/clsu32.c module of Linux kernel systems is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/hid/hid-logitech-hidpp.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/hid/hid-logitech-hidpp.c module in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...