PT-2026-93660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the usb put function instance function. This happens when the function attempts to dereference the fd variable within the fi structure to retrieve th...

PT-2026-93567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 architecture within the import wp info function. The len field of the kvm hw breakpoint structure, which is controlled by user space, is assigned to an...

CVE-2026-89903: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...

PT-2026-93386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the Qualcomm rmnet driver. The function rmnet map deaggregate allocates sub-frames using alloc skb but leaves the skb-dev variable as NULL. While rmn...

PT-2026-93442

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the drm/nouveau/uvmm component. In the OP UNMAP SPARSE arm of the nouveau uvmm bind job submit function, the op-reg variable is assigned a value from...

PT-2026-93517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow can occur when the variable exp equals zero. This leads to undefined behavior during the shift operation 1 exp - 1. Recommendations At the moment, there is no...

CVE-2026-89955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet been set. A concurrent read of the 'status' attribute can therefore ca...

PT-2026-93542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the airspy driver. The airspy disconnect function clears the s-udev variable while holding the v4l2 lock. However, if a user closes the device after ...

CVE-2026-89888: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10checkhwcfg function calls fwnodehandleputep immediately after allocating and parsing the endpoint. However, it subsequently calls fwnodepropertyreadu32 using the...

PT-2026-93593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nand flash detect ext param page function where the system allocates memory based on the length declared by the ONFI parameter page. The function treats the data a...

PT-2026-93499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2x00 update fru versions function where a user-supplied BSG request is copied into a fixed 256-byte stack buffer. The function iterates based on the count...

PT-2026-93659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read and stack buffer overflow exist in the rtw get wps attr function within the rtl8723bs driver. The function processes WPS attributes from wireless management frames...

PT-2026-93385

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS3 file system where the ntfs read ea function fails to verify if the ef-size variable is sufficient to hold the record's name length, a padding byte, and the...

PT-2026-93512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the video-i2c media component where the kthread run function returns an ERR PTR an error pointer upon failure instead of NULL. When the start streaming function fails,...

PT-2026-93604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference exists in the kexec extra fdt size ppc64 function. On platforms lacking reserved memory regions, the get reserved memory ranges function may return 0...

PT-2026-93680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the NFSD component. A local administrator with CAP SYS ADMIN privileges can crash the kernel by triggering a state-revocation walk before the server...

PT-2026-93384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds page array access exists in the zisofs component of the ISO9660 file system. The issue occurs in the zisofs uncompress block function's empty-block fast path, which fail...

PT-2026-93486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the qla2x00 error entry function due to a double-read of ha-req q mapque. The function reads the map slot once for a NULL check and a second time when...

CVE-2026-89947: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: meson: align gxbb32kclksel number of parents with actual count The following out-of-bounds read has been observed by Christian on a GXBB WeTek Hub: ================================================================== BUG: KASA...

PT-2026-93398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where out-of-bounds reads can occur during the processing of share configuration responses. This happens because the system fails to validate IPC shar...