PT-2026-36466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the logitech-hidpp module during the probing of the Logitech G920 Driving Force Racing Wheel for Xbox One. If force feedback initialisation fails, an...

The vulnerability of the sk_stream_wait_memory() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamwaitmemory function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_bo_validate_size() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_object.c source file of the AMD GPU kernel for Linux’ Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to cause a system failure.

The vulnerability of the amdgpubovalidatesize function in the drivers/gpu/drm/amd/amdgpu/amdgpuobject.c source file of the AMD GPU kernel for Linux Direct Rendering Infrastructure DRI driver architecture is related to the access to an uninitialized pointer. Exploiting this vulnerability could all...

The vulnerabilities of the functions cnl_ipc4_irq_thread() and cnl_ipc_irq_thread() in the sound/soc/sof/intel/cnl.c module, which are part of the Linux SoC audio support, allow a malicious actor to cause system failures.

The vulnerability of the functions cnlipc4irqthread and cnlipcirqthread in the sound/soc/sof/intel/cnl.c module, which is part of the Linux SoC audio support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rtas_os_term() function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtasosterm function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform support for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the vmx_init() function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vmxinit function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the pointer swapping mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_resize_fs() function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4resizefs function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the mlx5e_priv module’s structure in the drivers/net/ethernet/mellanox/mlx5/core/en.h file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5epriv module’s drivers/net/ethernet/mellanox/mlx5/core/en.h file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities of the functions sg_read() and sg_get_rq_mark() in the drivers/scsi/sg.c module of the Linux operating system’s SCSI device driver, which allow a hacker to cause a service failure.

The vulnerabilities of the functions sgread and sggetrqmark in the drivers/scsi/sg.c module of the Linux SCSI device driver are related to premature release of resources during their operation. Exploiting these vulnerabilities could allow an attacker to cause service failures...

The vulnerability of the hidraw_release() function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem allows a hacker to trigger a service failure.

The vulnerability of the hidrawrelease function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem driver involves improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the tsi148_dma_list_add() function in the drivers/staging/vme_user/vme_tsi148.c module allows a hacker to trigger a service failure.

The vulnerability of the tsi148dmalistadd function in the drivers/staging/vmeuser/vmetsi148.c module, which supports additional devices in the Linux operating system’s kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to caus...

The vulnerability of the mceusb_gen1_init() function in the drivers/media/rc/mceusb.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the mceusbgen1init function in the drivers/media/rc/mceusb.c file of the Linux kernel’s multimedia device driver is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the init_cache_level() function in the arch/arm64/kernel/cacheinfo.c module, which is part of the ARM 64-bit kernel support in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the initcachelevel function in the arch/arm64/kernel/cacheinfo.c module, which is part of the ARM 64-bit kernel support for Linux operating systems, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-22425

Name of the Vulnerable Software and Affected Versions openDCIM version 23.04 through commit 4467e9c4 Description The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. This allows any authenticated user to access the functionality...

The vulnerability of the set_machine_constraints() function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulator driver allows a hacker to cause a service failure.

The vulnerability of the setmachineconstraints function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulator driver is related to improper memory release „memory leak“. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the ext4_clu_mapped() function in the fs/ext4/extents.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4clumapped function in the fs/ext4/extents.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the msm_dsi_modeset_init() function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the msmdsimodesetinit function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the pvr2_hdw_create() function in the driver/media/usb/pvrusb2/pvrusb2-hdw.c file of the Linux operating system’s multimedia device driver, which allows a hacker to cause a service failure.

The vulnerability of the pvr2hdwcreate function in the drivers/media/usb/pvrusb2/pvrusb2-hdw.c file of the Linux operating system’s multimedia device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the usb_reset_device() function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usbresetdevice function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...