CVE-2026-74470

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...

EUVD-2026-59663

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...

CVE-2026-72316

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

EUVD-2026-58926

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

PT-2026-72922

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi debug: Fix REPORT ZONES alloc len underflow OOB write resp report zones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloc len up with ALIGN before deriving the descriptor count: rep max zon...

PT-2026-72857

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw dp: Switch to drmm kzalloc Driver makes use of drmm encoder init to initialize the encoder and automatically handle the cleanup by registering drm encoder cleanup with drmm add action. However, the internal...

PT-2026-72858

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: inno-hdmi: Switch to drmm kzalloc Driver makes use of drmm encoder init to initialize the encoder and automatically handle the cleanup by registering drm encoder cleanup with drmm add action. However, the internal...

PT-2026-72356

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc obj / kzalloc objs to allocate the memcard structs, instead of kmalloc obj / kmalloc objs to prevent access to uninitialized data. Fixes runtime error: Fault in...

CVE-2026-68436

The CVE-2026-68436 issue affects the Linux kernel DRM for AMD display: the in-kernel struct dc can grow beyond the 4 MiB contiguous allocation limit, causing dc_create() to fail when allocated with kzalloc(). The fix replaces kzalloc() with kvzalloc() (and kvfree()) so allocation can fall back to...

PT-2026-70950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the dc create function uses kzalloc to allocate struct dc. Because struct dc has increased in size, it can exceed the page...

CVE-2026-68221

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...

EUVD-2026-55309

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns 0 for NULL pointer. Return -ENOMEM for devmkzalloc failure...

CVE-2026-68183 firmware: stratix10-svc: fix memory leaks and list corruption bugs

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when genpoolalloc fails by freeing pmem on the error path. Switch pmem allocation from devmkzalloc to kzalloc with explicit kfree in the free pa...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Proper initialization of work context pointers Proper initialization of the pointers to the ops member by using kzalloc instead of kmalloc when allocating the simulation work context. Otherwise, the pointers may...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: nvme: fixed memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace...

UBUNTU-CVE-2026-64215

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable Check the return value of kzalloc to prevent a NULL pointer dereference on allocation failure. Patchwork: https://patchwork.freedesktop.org/patch/721342/...

CVE-2026-64215

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable Check the return value of kzalloc to prevent a NULL pointer dereference on allocation failure. Patchwork: https://patchwork.freedesktop.org/patch/721342/...

Linux Distros Unpatched Vulnerability : CVE-2026-64215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable Check the return value of kzalloc...

CVE-2026-64215

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable Check the return value of kzalloc to prevent a NULL pointer dereference on allocation failure. Patchwork: https://patchwork.freedesktop.org/patch/721342/...

CVE-2026-64215

The CVE affects the Linux kernel’s drm/msm/a6xx component. A NULL pointer dereference could occur in a8xx_hfi_send_perf_table because kzalloc() return value is not checked. The vulnerability is resolved by a patch that adds the necessary check of kzalloc()’s return before use. Patchwork reference...