PT-2026-72265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the debug logging of the ims pcu irq function. The issue occurs because the function unconditionally prints data from pcu-urb in buf, even when the...

Linux Distros Unpatched Vulnerability : CVE-2026-72146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the...

Linux Distros Unpatched Vulnerability : CVE-2026-72499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Free CQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during...

Linux Distros Unpatched Vulnerability : CVE-2026-74515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow registering adapter interrupts without first...

SUSE CVE-2026-68202

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, then frees it. sndseqtimerclose clears q-timer-timeri. snduselocksync then drains borrowers, and sndseqtimerdelete frees q-timer. A...

SUSE CVE-2026-68182

In the Linux kernel, the following vulnerability has been resolved: comedi: comediparport: deal with premature interrupt Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the interrupt handler parportinterrupt in the "comediparport" driver, but it do...

SUSE CVE-2026-68216

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

SUSE CVE-2026-68395

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-52079

ENETIRQHandler RX descriptor not re-owned on error -- RX ring stall...

CVE-2026-68395

A flaw was found in the Linux kernel's satadwc460ex driver. During the SATA controller's initialization, interrupts are enabled before the corresponding interrupt handler is fully registered. This timing issue can lead to a spurious interrupt storm if an interrupt occurs prematurely or if...

CVE-2026-68182

A flaw was found in the Linux kernel's comediparport driver. A local user could trigger a premature interrupt, potentially due to incorrect initialization order of hardware registers or an invalid user-supplied I/O port address. This could lead to a general protection fault, resulting in a system...

CVE-2026-68200

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A lack of serialization in the userspace-driven timer utimer TRIGGER ioctl allows two threads to concurrently call sndtimerinterrupt. This race condition can lead to a use-after-free vulnerability, wher...

comedi: comedi_parport: deal with premature interrupt

...

ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered

...

CVE-2026-11733: Stack-based Buffer Overflow

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device...

CVE-2026-68405

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...

CVE-2026-68395

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-68318

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix use-after-free on workqueue during remove In pdscremove, the workqueue is destroyed before pdscteardown is called. This ordering allows two paths to queue work on the destroyed workqueue: 1. If pdscteardown -...

AZL-94938 CVE-2026-68241 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

CVE-2026-68241

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...