PT-2026-94555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer MIDI component where the snd midi input event function can run while a rawmidi substream is closing. This creates a race condition in snd rawmidi...

CVE-2026-93056: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

PT-2026-94911

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mlxbf-pmc driver when it is force-bound to a device that lacks an ACPI companion object. This happens because the mlxbf pmc probe function passes...

CVE-2026-90148: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4deletelease in nfs4addlease When nfs4addlease races with a delegation return, it calls nfs4deletelease to clean up. Previously, it passed priv, which can legitimately be NULL. Passing a...

CVE-2026-93114: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely...

CVE-2026-90405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-90297: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4icrtcinit returns plain NULL when layer initialization fails, while all its other error paths return an error pointer. The only caller, sun4itconbind, checks the result wi...

CVE-2026-90293: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/isert: post the full-feature receive buffers after session registration isertputlogintx posts the full-feature receive buffers before transportregistersession runs, so an initiator that does not wait for the final Login Respon...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.14 contains a security vulnerability. This vulnerability stems from race conditions occurring during the probe/remove processes, where workqueue and netdev are involved. The VF workqueue is not initialized before registering with netdev. As a result, ndosetrxmode may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability stems from the cgroupbpfreplace function in kernel/bpf/cgroup.c, which fails to allocate and specify the required cgroup storage when replacing an eBPF program. As a result, the new program inherits uninitialized...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the lack of checking for the return value of share-name in the ksmbdipctreeconnectrequest function, which may lead to null pointer dereferencing...

PT-2026-94787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the single-doorbell completion path when the ufshcd compl one cqe function is called with a NULL CQE Completion Queue Entry. If no command is...

CVE-2026-92493: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active The crash issue may occur when modprobe amdpstateut on intel platform. amdpstateut: 1 amdpstateutacpicpcvalid success! amdpstateut: 2 amdpstateutcheckenabled...

CVE-2026-92500: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write state and fix race Instead of checking the live inode state ext4hasinlinedatainode and ext4testinodestateinode, EXT4STATEMAYINLINEDATA in the writeend handlers, use the fsdata parameter...

CVE-2026-93149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: avoid NULL skb in stop queue drain mac80211hwsimstop drops any frames left in data-pending. The loop currently checks skbqueueempty and then dequeues separately. That split is racy with TX status handling,...

PT-2026-94778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where tegra241 vintf init lvcmdq stores a newly allocated vcmdq pointer in the vintf-lvcmdqs array before tegra241 vcmdq alloc smmu cmdq finishes building the vcmdq-cmdq...

CVE-2026-92492: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks cpufreqcpuget returns NULL when no cpufreq policy is associated with the requested CPU, for example because the CPU is offline or the policy has already been torn...

CVE-2026-93073: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dax: read holderops once in daxholdernotifyfailure daxholdernotifyfailure reads daxdev-holderops twice without READONCE -- once for the NULL check and once for the indirect notifyfailure call. A concurrent fsputdax can clear...

CVE-2026-93038: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chipinfo pointer is not NULL. If a user binds the driver using driveroverride via sysfs with a device name not present in the idtable or ofmatchtable, match data will...