PT-2026-85722

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6 rearrange rthdr assumes that segments left is not larger than the number of addresses described ...

PT-2026-85721

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix xfrm state construct auth-trunc leak attach auth trunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected auth algorithm has no sadb alg id. One real case is cmacaes. xfrm state construct then...

PT-2026-85792

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR EL2 for injected nested SError exceptions kvm inject el2 exception writes ESR EL2 for synchronous exceptions but not for SError. enter exception64 does not write ESR ELx for any exception type, so the...

PT-2026-85793

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must...

PT-2026-85640

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfc llcp parse gb tlv and nfc llcp parse connection tlv contain three related bugs in their TLV parsing loops: 1. 'offset' is declared u8 but tlv array len is u16. When TL...

PT-2026-85607

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrange timer on remove uclogic remove cancels the pen in-range timer and then stops the device: timer delete sync&drvdata-inrange timer; hid hw stophdev; timer delete sync only guarantees the...

PT-2026-85802

CVE-2026-80883: Linux kernel flaw in drm/tegra gr2d/gr3d. Potential race condition lets userspace submit jobs before register map init—can lead to crashes or privilege issues. Unpatched; impact uncertain. If you run Tegra, test https://t.co/s935nM3QCd cybersecurit valtersit CVE CVEAlert infosec...

PT-2026-85741

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in free rd atomic resources free rd atomic resources iterates using qp-attr.max dest rd atomic. Updating max dest rd atomic before freeing the old array can make the free path walk past the old allocation and...

PT-2026-85618

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec race The check for private futexes whether the waiter's mm, which is stored in the futex key and copied into the pi state, is the same as the owner's mm is not sufficient for exec. exec has a gap...

PT-2026-85718

In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decapsulation End.DX4 and End.DT4 decapsulate an IPv4 packet through decap and validate and send it directly to IPv4 routing. The inner packet therefore bypasses ip rcv core, which...

PT-2026-85638

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x common clean purges resp q before freeing the common PN533 state, but it leaves fragment skb untouched. The fragmentation helpers queue transmit fragments there while sending...

Linux Distros Unpatched Vulnerability : CVE-2026-80905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is...

Linux Distros Unpatched Vulnerability : CVE-2026-80795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix out-of-bounds write in ncitargetautoactivated ncitargetautoactivated appends a target to the fixed-size array ndev-targetsNCIMAXDISCOVEREDTARGETS...

Linux Distros Unpatched Vulnerability : CVE-2026-80783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one...

Linux Distros Unpatched Vulnerability : CVE-2026-80872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA I2C and SPI queue RCA firmware loading from component bind with requestfirmwarenowait. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-80848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb...

Linux Distros Unpatched Vulnerability : CVE-2026-80747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the...

Linux Distros Unpatched Vulnerability : CVE-2026-80909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from...

Linux Distros Unpatched Vulnerability : CVE-2026-80771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was...

Linux Distros Unpatched Vulnerability : CVE-2026-80805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: validate attr entry pointer before field access xfsattr3leafverifyentry accesses lentry/rentry fields namelen, valuelen before checking if the entry pointe...