CVE-2026-64445: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtwwepdecrypt is called without verifying that the frame is long enough t...

PT-2026-64726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the RNDIS Remote Network Driver Interface Specification gadget function. The rndis rm hdr function fails to verify the length of the RNDIS header before accessing its...

Linux Distros Unpatched Vulnerability : CVE-2026-64440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof...

Linux Distros Unpatched Vulnerability : CVE-2026-64339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies...

Linux Distros Unpatched Vulnerability : CVE-2026-64269

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry fo...

Linux Distros Unpatched Vulnerability : CVE-2026-64289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Set upper bounds on cache invalidation entrynum and entrylen iommufdhwptinvalidate takes a user-controlled entrynum and entrylen, each bounded only by...

PT-2026-64510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The iommufd hwpt invalidate function fails to properly validate user-controlled entry num and entry len variables, which are only bounded by U32 MAX. A multi-gigabyte entry len can force...

Linux Distros Unpatched Vulnerability : CVE-2026-64219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a...

PT-2026-64501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where afu ioctl dma map accepts a 64-bit length from userspace via the DFL FPGA PORT DMA MAP ioctl without an upper bound check. This value is passed to afu dma pin pages...

CVE-2026-64505: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed...

Linux Distros Unpatched Vulnerability : CVE-2026-64322

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst +...

PT-2026-64725

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the bmc150 accel fifo flush function. The function copies a number of samples reported by the device hardware FIFO into an on-stack buffer buffer...

PT-2026-64490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rtrs-srv component where the rdma write sg function fails to validate the length of the RDMA-Write operation against the maximum chunk size. When responding t...

PT-2026-64478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB2 client where the smb2 calc size function clears data length during overlap handling. This behavior can cause an invalid response to be incorrectly identified ...

PT-2026-64633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter ebtables component, module names are not properly validated to ensure they are null-terminated. This lack of length checking can result in a non-null terminated string...

Linux Distros Unpatched Vulnerability : CVE-2026-64280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: dfl-afu: validate DMA mapping length in afudmamapregion afuioctldmamap accepts a 64-bit length from userspace via DFLFPGAPORTDMAMAP ioctl without an upper...

Linux Distros Unpatched Vulnerability : CVE-2026-64435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qlen via skbqueuelen without holding the queue lock or using...

PT-2026-64545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF filesystem implementation where the udf free blocks function fails to include the extent offset when validating the logical block number and count against the...

Linux Distros Unpatched Vulnerability : CVE-2026-64324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops th...

PT-2026-64520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs during glob matching in the tracing system. This happens because regex match glob calls glob match, which scans strings until a NUL byte is encountered,...