PT-2026-69810

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13-rc1 Description A memory leak exists in the USB firmware-download path within the libertas wifi driver. The helper firmware cb function fails to free the single-stage firmware image after a successful...

PT-2026-69748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The TAS2781 firmware parser in the ASoC ALSA System on Chip component uses strlen to read variable-length description strings without first verifying the presence of a NUL terminator...

CVE-2026-68108: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...

PT-2026-69657

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the drm/amdkfd component during the calculation of the total cwsr size variable. Because this value is computed using 32-bit integers before being used for...

CVE-2026-68348: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen before checking that the string terminator is present inside the firmware blob. A...

CVE-2026-68353: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in ath6klwmitxcompleteeventrx without validation against the buffer length. This allows...

Linux Distros Unpatched Vulnerability : CVE-2026-68108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 6553665536...

CVE-2026-11810: NULL Pointer Dereference

The UpdateHub firmware-update agent's probe handler zimplupdatehubprobe in subsys/mgmt/updatehub/updatehub.c parses the JSON metadata returned by the update server into a fixed two-level nested-array struct. After parsing it validates only the outer array length objectslen != 2 and then...

Linux Distros Unpatched Vulnerability : CVE-2026-68326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiexprocessuapevent handles EVENTUAPSTAASSOC by exposing the reassociation request IEs tha...

Linux Distros Unpatched Vulnerability : CVE-2026-68401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armffa: Fix out-of-bound writes in ffasetupandtransmit Sashiko locally reports multiple out-of-bound issues in ffasetupandtransmit: 1 Writing...

Linux Distros Unpatched Vulnerability : CVE-2026-68234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix bo-pin leaking in amdgpubocreatereserved amdgpubocreatereserved only allocates a new BO when boptr struct amdgpubo boptr as input parameter is...

Linux Distros Unpatched Vulnerability : CVE-2026-68352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in...

Linux Distros Unpatched Vulnerability : CVE-2026-68410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libertas: fix memory leak in helperfirmwarecb helperfirmwarecb neglects to free the single- stage firmware image after a successful async load, leading to...

PT-2026-69752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ath6kl wmi connect event rx function. The firmware-controlled fields beacon ie len, assoc req len, and assoc resp len are not validated against the...

PT-2026-69753

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ath6kl wmi tx complete event rx function. The issue occurs because the num msg field, which is controlled by the firmware, drives a loop without being...

PT-2026-69508

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vce component. Malicious VCE command streams with oversized dimensions can trigger a 32-bit integer overflow, causing the calculated buffer...

PT-2026-69993

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain devices use hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data. An attacker with access to the device storage can recover these keys ...

CVE-2026-68401: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix out-of-bound writes in ffasetupandtransmit Sashiko locally reports multiple out-of-bound issues in ffasetupandtransmit: 1 Writing epmemaccess-reserved can write out of bounds for FFA versions 1.2 as...

CVE-2026-68410: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helperfirmwarecb helperfirmwarecb neglects to free the single-stage firmware image after a successful async load, leading to a memory leak in the USB firmware-download path. Fix this memory leak...

Linux Distros Unpatched Vulnerability : CVE-2026-68353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in...