PT-2026-64663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Out-of-bounds reads occur in the rtl8723bs staging driver due to missing header bounds checks in two Information Element IE parsing loops. Specifically, the functions issue assocreq and...

PT-2026-64634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation...

Linux Distros Unpatched Vulnerability : CVE-2026-64377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: qcom-cpufreq-hw: Fix possible double free qcomcpufreq.data is allocated with devmkzalloc in probe as an array of per-domain data. qcomcpufreqhwcpuinit...

CVE-2026-64377: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fix possible double free qcomcpufreq.data is allocated with devmkzalloc in probe as an array of per-domain data. qcomcpufreqhwcpuinit stores a pointer to one element of this array in policy-driverdata...

CVE-2026-64359: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEANSEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfstransactionbegin where multiple tasks performing chmod on a nilfs2 mount blocked for over 143 seconds waiting to acquire...

Linux Distros Unpatched Vulnerability : CVE-2026-64440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof...

Linux Distros Unpatched Vulnerability : CVE-2026-65904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's...

CVE-2026-64440: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof struct HTcapselement. Because pIE-length is a raw u8 from an...

CVE-2026-64272: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When mms114readreg reads the touch data packet from the device into the touch...

PT-2026-64667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the rtw cfg80211 set wpa ie function within the rtl8723bs staging driver. The issue occurs because the supplicant ie array in struct security priv is 256...

PT-2026-64598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the qcom-cpufreq-hw component. The qcom cpufreq.data is allocated using devm kzalloc in the probe function as an array of per-domain data, and qcom cpufreq ...

Linux Distros Unpatched Vulnerability : CVE-2026-63729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability...

openSUSE 16 Security Update : apache-ivy (openSUSE-SU-2026:21424-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21424-1 advisory. This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting...

Linux Distros Unpatched Vulnerability : CVE-2026-64272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When...

PT-2026-64736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component regarding Multi-Link Element MLE defragmentation. When a reconf or EPCS MLE is located in a non-transmitted profile, the defragmentation...

PT-2026-64664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the update beacon info function within the rtl8723bs staging driver. The Information Element IE parsing loop incorrectly manages buffer boundaries by only...

PT-2026-64665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the OnAssocRsp function within the rtl8723bs staging driver. The Information Element IE parsing loop advances by pIE-length + 2 per iteration but only...

Linux Distros Unpatched Vulnerability : CVE-2026-64359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject CLEANSEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfstransactionbegin where multiple tasks performing chmod ...

Linux Distros Unpatched Vulnerability : CVE-2026-26197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's siz...

Linux Distros Unpatched Vulnerability : CVE-2026-65900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify versions =3.0.0 and before 3.4.8, when configured with SAFEFORTEMPLATES together with a DOM output mode RETURNDOM, RETURNDOMFRAGMENT, or INPLACE, fail...