PT-2026-94433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...

CVE-2026-90297: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4icrtcinit returns plain NULL when layer initialization fails, while all its other error paths return an error pointer. The only caller, sun4itconbind, checks the result wi...

SUSE CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

AZL-101243 CVE-2026-89802 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix NULL deref unwinding an OPMAPSPARSE op Each bindjobop is zeroed by kzallocobj in bindjobopfromuop, and the OPMAPSPARSE case in nouveauuvmmbindjobsubmit only creates a region, so op-ops stays NULL for a...

EUVD-2026-80650

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

CVE-2026-90042

CVE-2026-90042 affects the Linux kernel's Ceph filesystem client . The root cause is that the messenger client uses kvmalloc() to allocate message buffers, which can place them in the vmalloc() region when physical memory fragmentation prevents a sufficiently large kmalloc(). The fscrypt subsyste...

EUVD-2026-80598

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in cephmdscheckaccess MDS session OPEN handling replaces mdsc-scapauths under mdsc-mutex, freeing the previous array and its strings. cephmdscheckaccess traverses this array without holding the mutex. A concurren...

CVE-2026-89978 accel/amdxdna: return early from a zero-length flush

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flush SYNCBO does not constrain its size, so a request for zero bytes reaches drmclflushvirtrange, which ends with an unconditional clflushoptend - 1. For an empty range that is the...

CVE-2026-89978

CVE-2026-89978 affects the Linux kernel accel/amdxdna driver (AMD NPU). The SYNC_BO ioctl does not validate that the requested size is non-zero, so a zero-byte request reaches drm_clflush_virt_range(), which unconditionally calls clflushopt(end - 1). For an empty range this dereferences the guard...

EUVD-2026-80451

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs qla2x00dfsfcewrite called kstrtoul with a NULL result pointer, so a successful parse would dereference NULL and oops. Worse, the int return value 0 on success, negative errno...

CVE-2026-89802

CVE-2026-89802 is a NULL pointer dereference in the drm/nouveau/uvmm driver of the Linux kernel . When a NOUVEAU_VM_BIND job contains an OP_MAP_SPARSE operation that is processed successfully, op->ops remains NULL because the sparse-map path only creates a region without allocating ops. If a s...

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

AZL-101508 CVE-2026-89784 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

CVE-2026-89790 ipv6: avoid divide by zero in rt6_multipath_rebalance

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in a second pass. Since RTMNEWROUTE is RTNL-free, a concurrent...

CVE-2026-89784

CVE-2026-89784 affects the Linux kernel SUNRPC subsystem. The functions rpcb_register_inet4() and rpcb_register_inet6() store the result of rpc_sockaddr2uaddr() into map->r_addr without checking for NULL . When the final kstrdup() inside rpc_sockaddr2uaddr() fails under memory pressure , the u...

CVE-2026-89784 SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

EUVD-2026-80305

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

CVE-2026-89784 SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

PT-2026-93390

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.12 Description In the SUNRPC component, the functions rpcb register inet4 and rpcb register inet6 fail to check the return value of rpc sockaddr2uaddr before storing it in map-r addr. When rpc sockaddr2uaddr returns NULL...