PT-2026-98625

In the Linux kernel, the following vulnerability has been resolved: perf/core: Allow list del during perf event overflow A PMU might use perf sched cb inc and perf sched cb dec interface to get the PMU call back function pmu::sched task invoked at schedule in and schedule out. This is achieved by...

PT-2026-98346

Name of the Vulnerable Software and Affected Versions Argus Monitor affected versions not specified Description An exposed IOCTL allows unprivileged users to disable x86 MONITOR and MWAIT instructions used by Hyper-V and other kernel components, which triggers a HYPERVISOR ERROR bugcheck. Accessi...

CVE-2026-97983

In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSEIOTLBGETFD and VDUSEVQGETINFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GETFD, this...

PT-2026-98870

Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to commit 573a9e73cf844f Description An improper exposure of resource to the wrong sphere exists in the host file helper gofer on Linux platforms with CUSE Character device for Userspace enabled. A local attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-97604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info-cmap and performs the usercopy after dropping info-lock. vfbremo...

PT-2026-98692

In the Linux kernel, the following vulnerability has been resolved: eth: nfp: bound the ntuple rule dump by the caller's buffer size nfp net get fs loc dumps every entry of nn-fs.list into rule locs without consulting cmd-rule cnt, which is how many entries the caller had room for. ETHTOOL...

Linux Distros Unpatched Vulnerability : CVE-2026-97983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vduse: return compat ioctl results directly The compat handler handles VDUSEIOTLBGETFD and VDUSEVQGETINFO, but then calls the native handler. Their different...

Linux Distros Unpatched Vulnerability : CVE-2026-97961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Allow listdel during perfeventoverflow A PMU might use perfschedcbinc and perfschedcbdec interface to get the PMU call back function pmu::schedtask...

SUSE CVE-2026-93823

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

UBUNTU-CVE-2026-93823

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

kernel: drm/virtio: use uninterruptible resv lock for plane updates

A flaw was found in the Linux kernel's VirtIO GPU Graphics Processing Unit driver. The virtiogpucursorplaneupdate and virtiogpuresourceflush functions fail to properly acquire a required lock, which can lead to a race condition. A local user could exploit this vulnerability by triggering a memory...

CVE-2026-93823 drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

CVE-2026-93823 drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

PT-2026-104895

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace iovecs when commands are submitted. Target-core completes those commands asynchronously, so VHOST SET MEM TABLE can...

ASRock IO Driver version 1.00.00.0000 Improper Access Control

ASRock IO Driver version 1.00.00.0000 contains an improper access control vulnerability in AsrDrv103.sys. Included research analyzes the vulnerable driver and its encrypted IOCTL mechanism...

CVE-2026-93823

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

PT-2026-97982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component where guest response descriptors are translated into userspace iovecs during command submission. Because target-core completes these commands...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

SUSE CVE-2026-93048

In the Linux kernel, the following vulnerability has been resolved: mtd: part: reject MTDPARTOFSRETAIN in mtdaddpartition mtdaddpartition does not reject the special offset value MTDPARTOFSRETAIN -3, which leads to a WARNON in addmtddevice when called through the BLKPG ioctl on NAND devices. The...