CVE-2026-68444

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

EUVD-2026-57019

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

CVE-2026-68444 firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

CVE-2026-68444

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

CVE-2026-68430

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUGON There's no need to crash the kernel for this case. cherry picked from commit 4d7c25208ca612b754f3bf39e9f16e725b828891...

CVE-2026-68430

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUGON There's no need to crash the kernel for this case. cherry picked from commit 4d7c25208ca612b754f3bf39e9f16e725b828891...

PT-2026-71060

NetBSD's hdaudio4 driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO FGRP SETCONFIG ioctl without elevated permissions by exploiting the absence of an access check on /dev/hdaudioN device nodes...

PT-2026-70981

Name of the Vulnerable Software and Affected Versions Zephyr OS affected versions not specified Description The PSA Protected Storage credential backend in subsys/net/lib/tls credentials/tls credentials trusted.c fails to initialize the credential lock mutex. Because the mutex is declared as a...

CVE-2026-12233: Improper Initialization

The PSA Protected Storage credential backend subsys/net/lib/tlscredentials/tlscredentialstrusted.c declared its credential-store mutex as a plain zero-filled static struct kmutex credentiallock; and never called kmutexinit on it. A statically zero-filled kmutex has an uninitialized wait queue its...

CVE-2026-68444: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passes NULL, uuidparse - uuidparse - uuidisvalid dereferences the pointer,...

PT-2026-70958

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the arm ffa firmware component. The function ffa partition info get passes the uuid str variable directly to uuid parse without verifying if it is...

Linux Distros Unpatched Vulnerability : CVE-2026-68444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armffa: Fix NULL dereference in ffapartitioninfoget ffapartitioninfoget passes uuidstr directly to uuidparse without a NULL check. When a caller passe...

Linux Distros Unpatched Vulnerability : CVE-2026-68415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a fail...

Linux Distros Unpatched Vulnerability : CVE-2026-68172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: arm64: make hugeptepget handled unaligned addresses hugeptepget can be handed a virtual...

Linux Distros Unpatched Vulnerability : CVE-2026-68347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: 259.410489...

SUSE CVE-2026-68415

In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a failed IPTFS state setup. In the reproduced case, xfrminitstate cached x-modecbs, IPTFS setup returned -ENOMEM before publishing modedata, an...

CVE-2026-68105

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When the Multimedia Engine Scheduler MES fails to initialize during driver loading, the Kernel Input Queue KIQ ring is incorrectly marked as ready. This can lead to a kernel panic, resulting in a Denial of Service DoS to the system...

CVE-2026-68136

A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. An attacker could exploit this by sending specially crafted network packets that cause a double aggregation of flush-marked socket buffers skbs. This issue arises from a missing flush check, which allows...

CVE-2026-68415

A flaw was found in the Linux kernel's xfrm IPSec framework component. A vulnerability exists where the xfrmstategctask can attempt to dereference stale callback data after a failed Internet Protocol Traffic Flow Security IPTFS state setup and subsequent module unload. This can lead to a kernel...

CVE-2026-68299

A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3gethdrlen function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This c...