PT-2026-90229

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the RISC-V KVM implementation. The SBI PMU EVENT GET INFO stores the product of a guest-controlled num events variable and the size of the event info...

PT-2026-90432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zram module where user-supplied deflate parameters are not properly validated. Specifically, the winbits variable is passed to the zlib deflate workspacesize...

PT-2026-90335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The function quickspi hid raw request receives a buffer length via the len variable, but this...

PT-2026-90272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the elf validity cache sechdrs function validates section sizes and offsets except for sections of type SHT NULL or SHT NOBITS. Subsequently, th...

CVE-2026-87987: External Control of System or Configuration Setting

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause...

PT-2026-90424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the nfsd component during session teardown. After a DESTROY SESSION operation, the teardown path may free a session while the rpciod still holds an...

PT-2026-90242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where the RPC/RDMA Read chunk position field, provided by a remote client, is not properly validated against the received inline body length. The...

PT-2026-89889

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.4-1.1 Description An arbitrary code execution issue exists where an attacker can bypass command permission checks. This is achieved by using environment variable assignments before allowlisted commands, as...

PT-2026-90541

Name of the Vulnerable Software and Affected Versions Shopper versions prior to 2.9.2 Description An authorization bypass exists in the packages/admin/src/Livewire/Components/Collection/CollectionProducts.php component. The Action::make'delete' and DeleteBulkAction::make functions lack proper...

PT-2026-90273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow issue exists in the super 1 load function. The variable sb-bblog shift, which is an u8 type value loaded from the on-disk superblock, is used to shift the sector and...

PT-2026-90184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the lp8788-charger component. The lp8788 charger remove function flushes charger work before unregistering IRQs, which allows an IRQ thread to queue...

PT-2026-90304

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI APEI GHES component where the ghes handle arm hw error function incorrectly calculates the remaining length of a section after skipping the cper sec proc arm...

CVE-2026-89679: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4setattr for deleg timestamp attrs When a SETATTR request includes FATTR4WORD2TIMEDELEGACCESS or FATTR4WORD2TIMEDELEGMODIFY in the attribute bitmap, nfsd4setattr sets delegattrs=true and calls...

PT-2026-90542

Name of the Vulnerable Software and Affected Versions Shopper versions 2.0.0 through 2.9.1 Description Authenticated users with the access setting permission can perform unauthorized destructive actions via the Livewire endpoint. This occurs because four Livewire components in the Settings area d...

PT-2026-90341

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID sony driver during driver unbind for Guitar Hero Live GHL dongles. The sony probe function arms a periodic timer where the callback ghl magic pok...

PT-2026-90337

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mcp2221 raw event function fails to validate the size of incoming HID reports. In the MCP2221 I2C GET DATA path, the system relies on the device-supplied data3 variable as the copy...

PT-2026-90206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 file system where the directory cookie position is incorrectly rebuilt in the ocfs2 dir foreach blk el function on 32-bit kernels. This occurs because the ma...

PT-2026-90299

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the eir get service data function within the Bluetooth component. The issue occurs when the function iterates through advertising data to find a Service...

PT-2026-90191

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq24257 power supply driver. The STAT-pin interrupt is managed by devm, meaning it remains active until the devm cleanup process occurs after the...

PT-2026-90211

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the o2dlm receive handlers trust length and count fields from the wire without proper bounding. This allows a malicious or compromised node that has joined the DLM...