PT-2026-64517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the exfat file system implementation where the exfat find dir entry function fails to properly bound the advance of the uniname pointer. When processing TYPE EXTEND...

PT-2026-64633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter ebtables component, module names are not properly validated to ensure they are null-terminated. This lack of length checking can result in a non-null terminated string...

PT-2026-64489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA siw driver where the siw proc rresp function fails to check the running total of inbound Read Response DDP segments against the sink buffer length on...

PT-2026-64560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the usbio bulk msg function. The function copies bpkt len bytes from the bulk IN buffer usbio-rxbuf into the caller's buffer. However, bpkt len is...

PT-2026-64656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Data races occur in the audit system when multiple readers access audit queue.qlen via the skb queue len function without holding the queue lock or using READ ONCE. Simultaneously, kaudi...

Linux Distros Unpatched Vulnerability : CVE-2026-64269

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers...

Linux Distros Unpatched Vulnerability : CVE-2026-64324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops th...

Linux Distros Unpatched Vulnerability : CVE-2026-64339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies...

CVE-2026-64505: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed...

PT-2026-64520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs during glob matching in the tracing system. This happens because regex match glob calls glob match, which scans strings until a NUL byte is encountered,...

PT-2026-64544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read can occur when mounting a crafted UDF image with a virtual VAT partition. The udf load vat function fails to validate the lengthHeader value from the on-disk VAT 2....

PT-2026-64478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB2 client where the smb2 calc size function clears data length during overlap handling. This behavior can cause an invalid response to be incorrectly identified ...

PT-2026-64671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Transparent Inter-Process Communication TIPC implementation when handling broadcast Gap ACK blocks. The function tipc get gap ack blks verifies if the...

PT-2026-64666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The OnAuth function in the rtl8723bs staging driver contains two issues in the shared-key authentication path. First, when the Privacy bit is set, rtw wep decrypt is called without...

PT-2026-64624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap get conf opt function reads the opt-len field, which is controlled by an attacker, and dereferences opt-val before...

PT-2026-64665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the OnAssocRsp function within the rtl8723bs staging driver. The Information Element IE parsing loop advances by pIE-length + 2 per iteration but only...

PT-2026-64488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer wrap occurs in 32-bit kernels during the validation of the nodeid payload length for FUSE NOTIFY PRUNE. The check uses a calculation where the daemon-controlled count...

Linux Distros Unpatched Vulnerability : CVE-2026-64435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qlen via skbqueuelen without holding the queue lock or using...

Linux Distros Unpatched Vulnerability : CVE-2026-64403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: validate option length before reading conf opt value l2capgetconfopt derives the option length from the attacker-controlled opt-len field and...

Linux Distros Unpatched Vulnerability : CVE-2026-64280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: dfl-afu: validate DMA mapping length in afudmamapregion afuioctldmamap accepts a 64-bit length from userspace via DFLFPGAPORTDMAMAP ioctl without an upper...