EUVD-2026-81923

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

CVE-2026-90062

CVE-2026-90062 is a vulnerability in the Linux kernel 's netfilter/nf_tables subsystem. The root cause is an ordering issue where the chain blob was allocated after the ruleset hardware offload, which could leave the offloaded ruleset in the NIC inconsistent with the software ruleset . The fix mo...

CVE-2026-90062 netfilter: nf_tables: move hardware offload step after building the chain blob

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

CVE-2026-90062 netfilter: nf_tables: move hardware offload step after building the chain blob

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

PT-2026-94448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ptp netc component where the max period bound in the net timer enable perout function is computed in a way that can exceed U32 MAX. This leads to a situation where...

PT-2026-94702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver where the mt7915 pci init hif2 function is called unconditionally and then called again within the WED-inactive branch. This results in the global hi...

CVE-2026-90062: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: move hardware offload step after building the chain blob Allocate the chain blob before the ruleset offload to reduce chances of entering an inconsistent state where the offloaded ruleset in the nic and the...

PT-2026-94980

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC fsl audmix component where the AUDMIX block remains powered off after pm runtime enable until the first runtime resume occurs. Register writes performed betwe...

CVE-2026-93160: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmelecdhcomputesharedsecret uses the private key stored in the device. However, the public key is cached only after atmelecdhsetsecret...

Trust, but Validate the Instrument: Auditing AI-Generated RTL Verification Plans on Authored Security-Regression Proxies

AI-generated RTL verification plans can satisfy a provider schema yet fail at the boundary to trusted execution. We present SecTB-RTL, an auditable framework covering 31 tasks and 124 authored hardware-security regressions. A deterministic non-AI baseline killed 36, 75, and 78 mutants at increasi...

PT-2026-94410

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where the hardware offload step occurs before the chain blob is built. This sequence can lead to an inconsistent state where the...

PT-2026-94663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Legacy I/O and memory sysfs handlers fail to verify security locked downLOCKDOWN PCI ACCESS, leaving legacy io and legacy mem files unprotected during kernel lockdown. This allows a root...

DEBIAN-CVE-2026-89923

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...

PT-2026-93510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iris vpu power off function where the use of disable irq nosync fails to wait for queued threaded IRQ handlers to complete before returning. This can lead to a...

PT-2026-93564

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 architecture where guest debug data is not properly freed when a vCPU is destroyed. The function kvm s390 clear bp data is only triggered when user space...

CVE-2026-90047: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM getflatccsoffset reads the base of the flat CCS storage from the hardware, scales it by the number of enabled L3 nodes, and rounds the result up to 128K. Everything below...

CVE-2026-89957: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfioapmdevhotunplugcfg function uses the return value of bitmapandnot to determine whether the guest APCB needs to be updated. However, bitmapandnot...

PT-2026-93598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio ap mdev hot unplug cfg function where the use of bitmap andnot to determine if a guest APCB Advanced Program Console Book needs updating can lead to skipped...

Linux Distros Unpatched Vulnerability : CVE-2026-89869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an alrea...

CVE-2026-58699

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...