PT-2026-61337

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvme-pci module during the completion process. The issue arises because dma vec allocations are not properly released when P2P Peer-to-Peer memory is used, as...

PT-2026-61501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the Linux kernel when the damon sysfs memcg path to id function breaks the mem cgroup iter loop without calling the mem cgroup iter break function. This failur...

PT-2026-61243

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf msg push data function within the sockmap component of the BPF Berkeley Packet Filter subsystem. When data is inserted into the middle of a scatterlist entry,...

PT-2026-61370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bio integrity copy user function where the bip vcnt variable is incorrectly overwritten. Because bio integrity add page already sets bip vcnt to 1 for the bounce...

PT-2026-61391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the statmount mnt idmap function. The function uses seq printf to write a mapping and manually increments seq-count to include a NUL separator. If seq...

PT-2026-61386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the cancellation of Direct I/O DIO and single read subrequests is handled incorrectly. When preparing a new subrequest for a read fails, the...

PT-2026-61387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A preempt count leak exists in the powerpc/hv-gpci component. Four sysfs show callbacks—processor bus topology show, processor config show, affinity domain via virtual processor show, an...

PT-2026-61390

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the irq work single function when using PREEMPT RT. In this configuration, non-HARD irq work is executed in per-CPU kthreads through run irq workd, and i...

PT-2026-61411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs in the batman-adv module when a hard interface is retrieved as the primary interface of a mesh interface but becomes decoupled from it before the rtnl...

PT-2026-61475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs perform write function where write streaming—the process of caching dirty data in dirty but !uptodate folios to avoid reading data that will be immediately...

PT-2026-61101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nfsd4 create file function contains two issues related to Access Control List ACL handling. First, the return value of the nfsd4 acl to attr function is ignored. If the conversion fr...

kbfs-6.6.3-3.1 on GA media (moderate)

kbfs-6.6.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:11306-1 Rating: moderate Cross-References: CVE-2026-39824 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the kbfs-6.6.3-3.1 packag...

PT-2026-61369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference exists in the bio integrity map user function. This occurs because pin user pages fast may only partially succeed in pinning pages, and the bio integrity map...

PT-2026-61444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP component within the l2cap ecred reconfigure function. Due to an incorrect conversion of a request PDU to use DEFINE RAW FLEX, the l2cap send cmd...

PT-2026-61351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU double-fetch issue exists in the mana hwc rx event handler function. The hwc msg id is read from DMA-coherent memory and bounds-checked, but is...

PT-2026-61357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where the system fails to correctly extract the error code when the vfs mkdir function fails. This results in the mkdir error logic being trigger...

PT-2026-61325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the rocket ioctl create bo function. The function inserts a GEM handle into the file's IDR using drm gem handle create before completing several...

PT-2026-61262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth ISO implementation where iso sock close calls iso sock clear timer before acquiring the socket lock. This allows iso sock clear timer to read the...

PT-2026-61265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the L2CAP Bluetooth subsystem within the l2cap chan timeout function. The set chan timer function acquires a reference to the channel using l2cap chan hold...

PT-2026-61430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ixgbevf driver during VEPA multicast source pruning. The function ixgbevf clean rx irq frees a socket buffer skb and continues to the next descriptor...