PT-2026-47372

In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind...

TencentOS Server 2: kernel (TSSA-2026:0418)

"The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0418 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilitie...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1817)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1817 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files CVE-2025-39901 In the Linux kernel, the following vulnerability has been resolved:...

Amazon Linux 2023 : nvidia-imex (ALAS2023NVIDIA-2026-288)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-288 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successfu...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20912-1 Rating: important References: bsc1243603 bsc1260539 bsc1260584 bsc1261590 bsc1262634 bsc1262656 bsc1262668 bsc1262754 bsc1262755...

PT-2026-47384

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp-psys is confirmed to be an error pointer not NULL so this condition is true and the error pointer is dereferenced. So isp-psys should be set to NULL before goin...

PT-2026-47351

In the Linux kernel, the following vulnerability has been resolved: mm/alloc tag: clear codetag for pages allocated before page ext initialization Due to initialization ordering, page ext is allocated and initialized relatively late during boot. Some pages have already been allocated and freed...

PT-2026-47357

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3 release In docg3 release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls doc release device on each floor. doc release device frees the docg3 struct via...

PT-2026-47377

In the Linux kernel, the following vulnerability has been resolved: flow dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT RECOMMENDED for PPPoE. In practice, pppd does not support negotiating PFC for PPPoE sessions, and the flow...

PT-2026-47306

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation. Vblank timers are covered in vblank helpers and initializer...

PT-2026-47354

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device property read string fails, str is left uninitialized but the code falls through to strcmpstr, ..., dereferencing a garbage pointer. Replace manual...

Linux Distros Unpatched Vulnerability : CVE-2026-46280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib: testhmm: evict device pages on file close to avoid use-after-free Patch series Minor hmmtest fixes and cleanups. Two bugfixes a cleanup for the HMM kernel...

PT-2026-47327

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After-Free UAF and Null Pointer Dereference NPD conditions were observed in the lifecycle management of hci uart. The primar...

PT-2026-47363

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash digest key Use print hex dump devel for dumping sensitive HMAC key bytes in hash digest key to avoid leaking secrets at runtime when CONFIG DYNAMIC DEBUG is enabled...

PT-2026-47383

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma flags in vb2 dma sg mmap vb2 dma contig sets VMA flags VM DONTEXPAND and VM DONTDUMP and I do not see a reason why vb2 dma sg should behave differently. This avoids hitting WARN ON!vma-vm flags & VM...

PT-2026-47367

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in kvm apic update irr even if PIR is empty Fall back to apic find highest vector when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt from the existing IRR. In...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault CVE-2026-31456 In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix hugetlb fault mutex hash calculation CVE-2026-31575...

PT-2026-47358

In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selecting the high resolution When selecting the high resolution values from the array, FIELD GET is used to pull from a 3 bit register, yet the array being indexed has only 5 values ...

Linux Distros Unpatched Vulnerability : CVE-2026-46309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise Add validation in xevmmadviseioctl to reject PAT indices with XECOHNONE coherency mode wh...

poc-lab-798

poc-lab-798 Recent CVE PoC & reproduction scripts. Focused on...