PT-2026-72426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the early serial init function during early boot. This happens when the baud rate for console=uart8250 is empty, 0, invalid, or overflows to 0 when stored as...

PT-2026-72403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In 64-bit configurations, calling firmware entry points from a kernel thread other than the initial one causes the stack to be placed in the XKPHYS 64-bit memory segment. This results in...

PT-2026-72905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vc4 component where the binner BO, a 16MB buffer divided into 512KB slots, is recycled without being cleared between jobs. Each slot contains the Tile State Da...

CVE-2026-74453: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submission time and recycled as jobs complete, without ever being cleared. Ea...

Linux Distros Unpatched Vulnerability : CVE-2026-74453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submissi...

PT-2026-72906

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vc4 component where the vc4 overflow mem work function incorrectly writes the size of the entire binner Buffer Object BO to the BPOS variable instead of the...

CVE-2026-72238: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

CVE-2026-72215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer length to be a multiple of the max burst size configured for the channel. When a client requests a transfer where the length...

CVE-2026-72110: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this call graph shown here for the !CONFIGMEMCG case: copyprocess...

Linux Distros Unpatched Vulnerability : CVE-2026-74454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size vc4overflowmemwork points BPOA at a 512KB slot inside the 16MB binner BO, but writes t...

Linux Distros Unpatched Vulnerability : CVE-2026-74462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger...

Linux Distros Unpatched Vulnerability : CVE-2026-72110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this ca...

SUSE CVE-2026-68120

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

Linux Distros Unpatched Vulnerability : CVE-2026-68237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes...

Linux Distros Unpatched Vulnerability : CVE-2026-68120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet...

SUSE CVE-2026-68095

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: iouringenter - register sqe - fuseuringcreateringent - allocate ent but doesn't grab queueref yet - thread b: fuseconndestroy -...

CVE-2026-68173

In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublkdevready instead of ub-completion ub-completion is only re-armed by a successful STARTUSERRECOVERY. If the ublk server sends ENDUSERRECOVERY without one - e.g. its START failed with -EBUSY and the error was...

UBUNTU-CVE-2026-68219

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respo...

CVE-2026-68364

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dclock deadlock during suspend Why System hang observed during suspend/resume while video is playing. amdgpudmismdisable is called under dclock and waits for ISM delayed work via disabledelayedworksync. T...