CVE-2026-68242

The CVE-2026-68242 entry concerns the Linux kernel's drm/i915/gt subsystem, where a NULL dereference could occur on sched_engine allocation failure due to calling intel_context_put() before intel_context_init() in execlists_create_virtual(). The issue is resolved by a fix that prevents the NULL d...

CVE-2026-68179

CVE-2026-68179 affects the Linux kernel NSM: nsm_dev_ioctl() may unlock a mutex that was never acquired when pre-lock copy_from_user() fails, risking a local DoS. A patch changes control flow to return immediately on pre-lock failures and to keep the unlock path for post-lock errors only. The vul...

CVE-2026-68179 misc: nsm: only unlock nsm_dev on post-lock error paths

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...

CVE-2026-68178

CVE-2026-68178 concerns the Linux kernel NSM (Network Shared Memory) misc device. The root cause is that misc_open() installs file_operations with fops_get() which pins file_operations::owner, but NSM’s misc device left nsm_dev_fops.owner unset, allowing an open /dev/nsm descriptor to survive an ...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380

The CVE-2026-19380 affects Mullvad wireguard.sys 0.10.1, specifically the AdapterState function within the IOCTL Handler. The vulnerability is described as a manipulation that leads to an improper update of the reference count, requiring local access to exploit. Public exploitation material is no...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-68242: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...

CVE-2026-19380: Improper Update of Reference Count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

PT-2026-69324

Name of the Vulnerable Software and Affected Versions Mullvad wireguard.sys version 0.10.1 Description An issue exists in the IOCTL Handler component where the AdapterState function fails to properly update the reference count. This flaw requires local access to be exploited. Recommendations At t...

PT-2026-69579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nsm dev ioctl function where the system jumps to a common output label even if the initial copy from user function fails before the nsm-lock mutex is acquired. Thi...

CVE-2026-68178: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open miscopen installs a misc driver's file operations with fopsget, which pins fileoperations::owner before replacing the file's fop. The NSM misc device leaves nsmdevfops.owner unse...

The vulnerability of the ioctl request handler CONS_HISTORY in FreeBSD’s operating systems allows a attacker to increase their privileges and execute arbitrary code.

The vulnerability of the ioctl request handler CONSHISTORY in FreeBSD operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

PT-2026-69675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the amdgpu gem op ioctl function within the AMDGPU GEM OP GET MAPPING INFO path. The issue occurs because the function calls amdgpu vm bo find to loo...

PT-2026-69642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the IOCTL path when a sched engine allocation fails. This happens because intel context put is called before intel context init within the execlists create...

PT-2026-69578

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NSM misc device where nsm dev fops.owner is left unset. When misc open is called, it uses fops get to pin the file operations::owner, but because the owner is unse...

PT-2026-69584

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds read exists in the mmc ioctl cdrom volume function during a CDROMVOLCTRL operation. The function reads an audio control mode page into a 32-byte stack buffer. When ...

Linux Distros Unpatched Vulnerability : CVE-2026-68242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside wou...

The vulnerabilities of the functions uacce_put_queue() and uacce_fops_unl_ioctl() in the drivers/misc/uacce/uacce.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...