PT-2026-64656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Data races occur in the audit system when multiple readers access audit queue.qlen via the skb queue len function without holding the queue lock or using READ ONCE. Simultaneously, kaudi...

Linux Distros Unpatched Vulnerability : CVE-2026-64322

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst +...

PT-2026-64501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where afu ioctl dma map accepts a 64-bit length from userspace via the DFL FPGA PORT DMA MAP ioctl without an upper bound check. This value is passed to afu dma pin pages...

PT-2026-64544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read can occur when mounting a crafted UDF image with a virtual VAT partition. The udf load vat function fails to validate the lengthHeader value from the on-disk VAT 2....

PT-2026-64545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF filesystem implementation where the udf free blocks function fails to include the extent offset when validating the logical block number and count against the...

PT-2026-64560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the usbio bulk msg function. The function copies bpkt len bytes from the bulk IN buffer usbio-rxbuf into the caller's buffer. However, bpkt len is...

PT-2026-64572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the kalmia rx fixup function. The function calculates usb packet length by subtracting twice the KALMIA HEADER LENGTH from skb-len. Because the pre-loop...

PT-2026-64665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the OnAssocRsp function within the rtl8723bs staging driver. The Information Element IE parsing loop advances by pIE-length + 2 per iteration but only...

PT-2026-64671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Transparent Inter-Process Communication TIPC implementation when handling broadcast Gap ACK blocks. The function tipc get gap ack blks verifies if the...

PT-2026-64488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer wrap occurs in 32-bit kernels during the validation of the nodeid payload length for FUSE NOTIFY PRUNE. The check uses a calculation where the daemon-controlled count...

CVE-2026-64505: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed...

CVE-2026-64445: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtwwepdecrypt is called without verifying that the frame is long enough t...

PT-2026-64517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the exfat file system implementation where the exfat find dir entry function fails to properly bound the advance of the uniname pointer. When processing TYPE EXTEND...

PT-2026-64666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The OnAuth function in the rtl8723bs staging driver contains two issues in the shared-key authentication path. First, when the Privacy bit is set, rtw wep decrypt is called without...

PT-2026-64489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA siw driver where the siw proc rresp function fails to check the running total of inbound Read Response DDP segments against the sink buffer length on...

Linux Distros Unpatched Vulnerability : CVE-2026-64440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof...

Linux Distros Unpatched Vulnerability : CVE-2026-64289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Set upper bounds on cache invalidation entrynum and entrylen iommufdhwptinvalidate takes a user-controlled entrynum and entrylen, each bounded only by...

PT-2026-64490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rtrs-srv component where the rdma write sg function fails to validate the length of the RDMA-Write operation against the maximum chunk size. When responding t...

Linux Distros Unpatched Vulnerability : CVE-2026-64403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: validate option length before reading conf opt value l2capgetconfopt derives the option length from the attacker-controlled opt-len field and...

Linux Distros Unpatched Vulnerability : CVE-2026-64339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies...