PT-2026-93660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the usb put function instance function. This happens when the function attempts to dereference the fd variable within the fi structure to retrieve th...

PT-2026-93680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the NFSD component. A local administrator with CAP SYS ADMIN privileges can crash the kernel by triggering a state-revocation walk before the server...

PT-2026-93918

Name of the Vulnerable Software and Affected Versions Skipper versions prior to 0.27.37 Description Skipper is an HTTP router and reverse proxy for service composition. The opaAuthorizeRequestWithBody filter can authorize oversized requests by incorrectly signaling the truncation state to the Ope...

PT-2026-94124

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description djust allows an unauthenticated WebSocket or SSE client to trigger the import and execution of the top-level code of any importable Python module. This occurs because the live transport resolves the...

PT-2026-93650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU issue exists in the scsi bsg uring cmd function. The function reads bsg uring cmd from a shared memory-mapped Submission Queue Entry SQE. A user can...

PT-2026-93398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where out-of-bounds reads can occur during the processing of share configuration responses. This happens because the system fails to validate IPC shar...

PT-2026-93681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV implementation where the SNP VMSA Virtual Machine Save Area is not forcefully invalidated when its backing gmem page is zapped, such as during a PUNCH HOLE...

PT-2026-93459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vcn component during the dec msg buffer count check. When the num buffers variable is set to 0x3FFFFFFF, the calculation 6 + num buffers 4...

PT-2026-93558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the KVM arm64 component between VNCR TLB invalidation and the vcpu put function during VNCR page unmapping. The issue arises because TLB invalidation occurs...

PT-2026-93822

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description The SSE client-to-server POST endpoints are marked as @csrf exempt and the SSE GET stream endpoint lacks an Origin check. This allows a cross-origin page to manipulate a session authenticated by victim...

PT-2026-93602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the powerpc memory management where the vmemmap populate compound pages function incorrectly tracks addr pfn. The addr pfn variable is advanced manually in parallel wi...

PT-2026-93735

Name of the Vulnerable Software and Affected Versions zlt2000 microservices-platform versions prior to 6.0.0 Description An authorization bypass exists in the file-center module. The 'DELETE /files/id' endpoint fails to perform ownership validation, allowing authenticated attackers to delete file...

PT-2026-93338

Name of the Vulnerable Software and Affected Versions Grafana OSS affected versions not specified Grafana Enterprise affected versions not specified Description An issue exists where symbolic links are not safely resolved during the extraction of plugin archives. A specially crafted archive can u...

PT-2026-93588

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0-rc5 Description An out-of-bounds read occurs in the Linux kernel due to a mismatch between the actual number of parents and the hard-coded num parents field in the gxbb 32k clk sel mux. This issue was triggered when ...

PT-2026-93384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds page array access exists in the zisofs component of the ISO9660 file system. The issue occurs in the zisofs uncompress block function's empty-block fast path, which fail...

PT-2026-93385

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS3 file system where the ntfs read ea function fails to verify if the ef-size variable is sufficient to hold the record's name length, a padding byte, and the...

CVE-2026-89792: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

PT-2026-93542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the airspy driver. The airspy disconnect function clears the s-udev variable while holding the v4l2 lock. However, if a user closes the device after ...

PT-2026-93659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read and stack buffer overflow exist in the rtw get wps attr function within the rtl8723bs driver. The function processes WPS attributes from wireless management frames...

PT-2026-93386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the Qualcomm rmnet driver. The function rmnet map deaggregate allocates sub-frames using alloc skb but leaves the skb-dev variable as NULL. While rmn...