PT-2026-122005

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop In the dmaengine path the driver pre-submits RX buffers and holds in-flight TX buffers whose SKBs are DMA-mapped by the driver and freed only in the completion...

PT-2026-122000

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: pcie-m2: Fix leaking array from of regulator bulk get all of regulator bulk get all allocates the consumers array and hands it to the caller, who is expected to free it at an appropriate time. pwrseq-pcie-m2.c...

PT-2026-129131

Name of the Vulnerable Software and Affected Versions Echo versions 4.0.0 through 4.16.0 Description The opt-in Decompress middleware in Echo v4 fails to limit the expanded size of a gzip-decoded request stream. This allows a small compressed request to expand into a very large body during readin...

PT-2026-121977

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix shrinker accounting double-subtraction on nested external pins xe bo pin external and xe bo unpin external support nested pins, since the underlying ttm bo pin/ttm bo unpin maintain a pin count refcount rather than a...

PT-2026-121876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lan966x fdma reload function where the RX state is not fully restored following a reload failure. While the function backs up rx-page pool and rx-fdma, it fails to...

PT-2026-122006

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: free the matchall entry on destroy sparx5 tc matchall replace allocates a struct sparx5 mall entry for every offloaded matchall filter and adds it to sparx5-mall entries. sparx5 tc matchall destroy removes the entry...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0; it stems from pwrseq-pcie-m2.c failing to release the consumers array allocated by ofregulatorbulkgetall, potentially leading to a memory leak...

PT-2026-122022

In the Linux kernel, the following vulnerability has been resolved: ibmveth: h free logical LAN on open-fail after register ibmveth open registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out free buffer pools without h free logical lan, so PHYP still owns the...

PT-2026-135093

Security vulnerability affects the sonarqube package. Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from a flaw in the calculation of page table preallocation size within drivers/gpu/drm/imagination/pvrmmu.c. This flaw fails to accurately determine both the device address range and its endpoints, while also neglecting page...

Diego Nehab rply input validation error vulnerability

Diego Nehab: Versions 1.1.4 and earlier contain an input validation error vulnerability. This flaw stems from improper array index validation in the plyreadheaderproperty function; it accepts a list as the length or value type for list properties. An attacker can supply a specially crafted PLY...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability. This vulnerability arises because in the Bluetooth RFCOMM socket implementation, rfcommrecvdata passes an skb to d-dataready without releasing it. Additionally, when no DLC owner exists, data frames are still processed via the callback mechanism...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from damonptepmkold failing to use page-aligned addresses, causing PTEAF entries outside sampled pages to be cleared during page table traversal and subsequent out-of-bounds writes. This may lead to a kernel crash or memory...

PT-2026-121865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 HWS component where deleting a table that has a miss table created via the mlx5hws table set default miss function does not properly remove the table from...

PT-2026-121996

In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices ch readconfig looks up the scsi device of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt. scsi device...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because after caviumptpget obtains a reference to a PTP PCI device via pcigetdevice, if subsequent initialization steps fail, it fails to release that reference,...

ALSA-2026:A011 Important: php:7.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state leading to use-after-free CVE-2026-109619 For more...

ALSA-2026:A012 Important: php:7.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state leading to use-after-free CVE-2026-109619 For more...

ALSA-2026:A013 Important: php:8.0 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state leading to use-after-free CVE-2026-109619 For more...

ALSA-2026:A014 Important: php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state leading to use-after-free CVE-2026-109619 For more...