CVE-2026-14256

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash...

Linux slaves/w1_therm.c DoS

The vulnerability of the slaves/w1therm.c component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-68443

A flaw was found in the Linux kernel's gigabytewaterforce hwmon driver. A race condition exists because hidhwstop does not properly stop device I/O. This can occur during a driver probe failure after I/O has been initiated, leading to a Use-After-Free UAF vulnerability. An attacker could...

UBUNTU-CVE-2026-68447

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without bounding it to the allocated BO region. If the HW field is larger than...

UBUNTU-CVE-2026-68450

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert addrelocroot allocates a mappingnode before inserting it into rc-relocroottree. If rbsimpleinsert finds an existing entry, it returns the existing rbnode and leaves the newl...

DEBIAN-CVE-2026-68446

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...

UBUNTU-CVE-2026-68435

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

UBUNTU-CVE-2026-68431

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...

CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

Linux Distros Unpatched Vulnerability : CVE-2026-68219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before...

Linux Distros Unpatched Vulnerability : CVE-2026-68356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can retur...

Linux Distros Unpatched Vulnerability : CVE-2026-68224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function...

Linux Distros Unpatched Vulnerability : CVE-2026-68380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mmstruct in job scheduler amdxdnacmdsubmit stores...

Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability

Summary An out-of-bounds read vulnerability exists in the IppQualifyAddresses function of the Microsoft Windows tcpip.sys driver. A specially crafted I/O request packet IRP can cause an arbitrary out-of-bounds read, potentially leading to information disclosure or a denial-of-service condition...

Linux scmi_pm_domain driver DoS

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux PCI Controller Cadence DoS

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with...

Linux Distros Unpatched Vulnerability : CVE-2026-68221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any prob...

Windows Sockets Driver Privilege Escalation

The vulnerability of the driver for the afd.sys auxiliary function in Windows Sockets operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE CVE-2026-68340

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...