SUSE CVE-2026-64208

In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AFRXRPC to make use of this to...

SUSE CVE-2026-64219

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

PT-2026-64633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter ebtables component, module names are not properly validated to ensure they are null-terminated. This lack of length checking can result in a non-null terminated string...

PT-2026-64624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap get conf opt function reads the opt-len field, which is controlled by an attacker, and dereferences opt-val before...

Linux Distros Unpatched Vulnerability : CVE-2026-64322

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst +...

Linux Distros Unpatched Vulnerability : CVE-2026-64324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops th...

PT-2026-64725

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the bmc150 accel fifo flush function. The function copies a number of samples reported by the device hardware FIFO into an on-stack buffer buffer...

PT-2026-64582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the check and correct requested length function within the hfs/hfsplus module. The function uses u32 arithmetic to compare the sum of off and len against no...

PT-2026-64726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the RNDIS Remote Network Driver Interface Specification gadget function. The rndis rm hdr function fails to verify the length of the RNDIS header before accessing its...

PT-2026-64501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where afu ioctl dma map accepts a 64-bit length from userspace via the DFL FPGA PORT DMA MAP ioctl without an upper bound check. This value is passed to afu dma pin pages...

PT-2026-64665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the OnAssocRsp function within the rtl8723bs staging driver. The Information Element IE parsing loop advances by pIE-length + 2 per iteration but only...

PT-2026-64520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs during glob matching in the tracing system. This happens because regex match glob calls glob match, which scans strings until a NUL byte is encountered,...

PT-2026-64572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the kalmia rx fixup function. The function calculates usb packet length by subtracting twice the KALMIA HEADER LENGTH from skb-len. Because the pre-loop...

CVE-2026-64505: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed...

CVE-2026-64445: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtwwepdecrypt is called without verifying that the frame is long enough t...

PT-2026-64517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the exfat file system implementation where the exfat find dir entry function fails to properly bound the advance of the uniname pointer. When processing TYPE EXTEND...

PT-2026-64488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer wrap occurs in 32-bit kernels during the validation of the nodeid payload length for FUSE NOTIFY PRUNE. The check uses a calculation where the daemon-controlled count...

PT-2026-64666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The OnAuth function in the rtl8723bs staging driver contains two issues in the shared-key authentication path. First, when the Privacy bit is set, rtw wep decrypt is called without...

Linux Distros Unpatched Vulnerability : CVE-2026-64440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof...

Linux Distros Unpatched Vulnerability : CVE-2026-64435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qlen via skbqueuelen without holding the queue lock or using...