EUVD-2026-67480

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80604 HID: core: Fix OOB read in hid_get_report for numbered reports

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80604 HID: core: Fix OOB read in hid_get_report for numbered reports

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80604

CVE-2026-80604 is an out-of-bounds read in the Linux kernel's HID core subsystem. When hid_report_raw_event() is called with a size of 0 for a numbered report, it invokes hid_get_report() before validating the size. Inside hid_get_report(), the function unconditionally dereferences data[0] to ext...

CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80590

CVE-2026-80590 is a Linux kernel vulnerability in the IP fragment reassembly code path (inet: frags ). A virtio_net_hdr (via tun/tap or AF_PACKET) can mark an IPv4/IPv6 fragment as GSO; after reassembly the reassembled skb retains this GSO state, and the subsequent call to skb_segment() — which a...

SUSE CVE-2026-72163

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the journal aborts during DIO completion. The crash is a general...

PT-2026-82995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sht3x update client function where 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16 to cpup. Because the pointers...

PT-2026-86697

In the Linux kernel, the following vulnerability has been resolved: hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3x update client, the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16 to cpup. The pointers passed to this function are...

CVE-2026-80695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3xupdateclient, the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16tocpup. The pointers passed to this function are...

CVE-2026-80590: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

PT-2026-82890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a virtio net hdr used in tun/tap or AF PACKET with PACKET VNET HDR can incorrectly mark IPv4 or IPv6 fragments as Generic Segmentation Offload GSO. The functions in...

PT-2026-82904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the HID core when a caller passes a size of 0 to the hid report raw event function for a numbered report. The system calls the hid get report function...

PT-2026-86711

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio net hdr tun/tap, or AF PACKET with PACKET VNET HDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gso type to frag off. inet frag reasm prepare/ine...

CVE-2026-80590: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80625: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

Linux Distros Unpatched Vulnerability : CVE-2026-80695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3xupdateclient, the 16-bit temperature and humidity values are extracted from a stack-allocated byte...

Linux Distros Unpatched Vulnerability : CVE-2026-80590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO;...

PT-2026-82925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RDMA/hns component during a specific scenario involving concurrent driver removal and driver reset. The bonding resource is released in the hns roce hw v2 exi...

CVE-2026-80604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...