ntel® Transfer Learning Tool Software Advisory

Summary: A potential security vulnerability for some Intel® Transfer Learning Tool software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Transfer Learning Tool software...

PT-2026-70316

Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

PT-2026-70276

Name of the Vulnerable Software and Affected Versions IntelR Data Center Attestation Primitives IntelR DCAP affected versions not specified Description A protection mechanism failure may allow an unprivileged software adversary with an unauthenticated user to enable data exposure. This issue can ...

The vulnerability of the Systemd service initialization and management subsystem, related to insecure privilege management, allows a attacker to trigger a service failure.

The vulnerability in the Systemd service initialization and management subsystem is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cluster Management Toolkit for Kubernetes Software Advisory

Summary: A potential security vulnerability for some Cluster Management Toolkit for Kubernetes software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Cluster Management Toolkit for...

Intel® Data Center Attestation Primitives (Intel® DCAP) Advisory

Summary: A potential security vulnerability in the Quote Verification Library QVL in Intel® DCAP may result in integrity failure in measurement and information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20702...

The vulnerability of the Lib/html/parser.py component of the Python programming language allows a hacker to access confidential data and also trigger a service failure.

The vulnerability of the Lib/html/parser.py component of the Python interpreter is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through the creation of...

Intel® AI Reference Models Software Advisory

Summary: A potential security vulnerability for some Intel® AI Reference Models software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-21400 Description: Protection mechanism failure for some...

Intel® Extension for TensorFlow Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for TensorFlow software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20728 Description: Protection mechanism failure for...

The vulnerability of the `pam_passkey_child_read_data()` function in the `src/responder/pam/pamsrv_passkey.c` file of the access control service for remote directories and the SSSD authentication mechanism allows a hacker to cause a service failure.

The vulnerability of the pampasskeychildreaddata function in the src/responder/pam/pamsrvpasskey.c file, belonging to the remote directory access control service and the SSSD authentication mechanism, is related to a buffer overflow. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the nspawn component of the initialization and service management subsystem of Systemd allows a attacker to cause a service failure.

The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-70284

Name of the Vulnerable Software and Affected Versions Intel Extension for TensorFlow versions prior to 2.15.0.3 Description A protection mechanism failure within Ring 3 User Applications may allow a local adversary with privileged user access to escalate privileges. This issue requires passive us...

PT-2026-70294

Name of the Vulnerable Software and Affected Versions LLM Scaler software affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an escalation of privilege. A local,...

PT-2026-70328

Protection mechanism failure for some IntelR oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Th...

CVE-2026-68105

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

CVE-2026-11811 Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoS

The UpdateHub over-the-air update client's startcoapclient in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret 0 flag, but ret was set to -1 immediately after the socket was...

CVE-2026-68379

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

CVE-2026-68375

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

CVE-2026-68372

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

CVE-2026-68358

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-kraken3 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...