PT-2026-94422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow occurs in the fq pie init function when the default quantum is set using psched mtu without clamping. On devices with an exceptionally large Maximum Transmission Unit...

PT-2026-94556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Samsung PWM timer used as a clock source on legacy systems. When PREEMPT RT a real-time patch for the Linux kernel is enabled on ARM architectures, regular spinloc...

PT-2026-94486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vsock implementation where the vsock accept function incorrectly checks the sk err variable of the listener socket. If a socket triggers a failed self-connect...

PT-2026-94576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the nvmet execute identify ns zns function. This happens when a host sends an Identify command with CNS 05h and CSI 02h ZNS targeting a file-backed...

PT-2026-94700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the mt7915 wifi driver when a probe IRQ failure happens. The hif2 reference obtained by the mt7915 pci init hif2 function is only released on error paths that...

Security update for chirp (important)

openSUSE security update: security update for chirp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21866-1 Rating: important References: bsc1280123 Cross-References: CVE-2026-78136 Affected Products: openSUSE Leap 16.0...

CVE-2026-90198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

CVE-2026-15815: Improper Link Resolution Before File Access

Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...

PT-2026-94423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq codel init function where the q-quantum and q-cparams.mtu values are set using psched mtu without proper clamping. When a device is configured with an excessive...

Unbreakable Enterprise kernel security update

5.4.17-2136.359.3.2 - sctp: prevent peer transport count overflow Asim Viladi Oglu Manizada Orabug: 40036878 CVE-2026-74469 - pppoe: reload header pointer after devhardheader Asim Viladi Oglu Manizada Orabug: 40036877 CVE-2026-68121 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Og...

PT-2026-94860

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero issue exists in the iwlwifi component of the Linux kernel within the iwl dbg tlv alloc fragments function. The problem occurs when the num frags variable equals 0, whi...

PT-2026-94619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the arm mpam module when a user unbinds a Memory System Component MSC after an error interrupt has triggered the mpam disable function. This happens...

PT-2026-94532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the null blk driver where attribute store methods generated with NULLB DEVICE ATTR do not use locks when updating device configurations. Because the NULLB DEV ...

PT-2026-94863

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver where the loop counter count in the iwl fwrt dump error logs function is declared as a u8 8-bit unsigned integer while the num pc variable is a u32...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-3807)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fs/smb/client: fix out-of-bounds read in cifssanitizeprepathCVE-2026-43112 lib/crypto: chacha: Zeroize permutedstate before it leaves...

PT-2026-94547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mi enum attr function within the ntfs3 file system. The validation for start and end Virtual Cluster Numbers VCN for non-resident attributes is insufficient. When...

PT-2026-94813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the devid write debugfs function within the AMD IOMMU driver. When the for each pci segment loop finishes without finding a matching segment, the pci seg pointer point...

PT-2026-94983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC SOF ipc4-topology component where the system fails to report errors when the number of input or output formats is zero. Specifically, the functions sof ipc4...

PT-2026-94946

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the cgroup/cpuset component where the nr deadline tasks variable in the cpuset structure can be corrupted. This occurs because the variable can be modified...