PT-2026-94683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs during TTY device removal. This happens when TTY device registration fails before a cdev is allocated, but the serial core retains the port for use by...

PT-2026-94910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the san probe function when installing the GSBUS address space handler. This happens because the function dereferences the result of ACPI COMPANION...

PT-2026-94645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the sun4i crtc init function returns NULL instead of an error pointer when layer initialization fails. Because the caller function sun4i...

PT-2026-94854

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f uac1 legacy USB gadget driver where the UAC1 STR ATTRIBUTE macro defines configfs show/store handlers for the fn play, fn cap, and fn cntl string options. The...

CVE-2026-90335: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: skip cdevdel when no cdev is registered TTY device registration can fail before a cdev is allocated. Serial core keeps the port so setserial can still use it, and later removal passes the NULL cdev slot to cdevdel, causing a...

CVE-2026-93118: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeedudc: check endpoint DMA allocation astudcprobe allocates a coherent DMA buffer used as the backing store for endpoint buffers. astudcinitep derives per-endpoint buffer pointers from udc-ep0buf, so a failed...

CVE-2026-93115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: Check ACPICOMPANION against NULL Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, so platform drivers that rely on...

PT-2026-94520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smbdirect component of the Linux kernel where memory pools are destroyed before the Queue Pair QP during an accept failure. In the rdma accept failed error path of...

PT-2026-94976

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the panthor driver during the split of GPU mapping caused by a partial unmap of an evicted Buffer Object BO. The issue arises because the logic...

CVE-2026-90405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-93038: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chipinfo pointer is not NULL. If a user binds the driver using driveroverride via sysfs with a device name not present in the idtable or ofmatchtable, match data will...

CVE-2026-92492: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks cpufreqcpuget returns NULL when no cpufreq policy is associated with the requested CPU, for example because the CPU is offline or the policy has already been torn...

CVE-2026-93124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device IDs because of devicematchdriveroverride, so platform drivers that...

PT-2026-94366

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description A flaw in the XML catalog parsing process allows a local user or an attacker to trigger a NULL pointer dereference by providing a specially crafted XML catalog. This occurs when a nextCatalog...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

CVE-2026-92493: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active The crash issue may occur when modprobe amdpstateut on intel platform. amdpstateut: 1 amdpstateutacpicpcvalid success! amdpstateut: 2 amdpstateutcheckenabled...

PT-2026-94504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where smb2 lock adds a ksmbd lock to the rollback list before the asynchronous work is allocated and registered. If these operations fail, the rollbac...

PT-2026-94787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the single-doorbell completion path when the ufshcd compl one cqe function is called with a NULL CQE Completion Queue Entry. If no command is...

PT-2026-94871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dax holder notify failure function. The function reads the holder ops variable twice without using READ ONCE, once for a NULL check and once for the indire...

CVE-2026-93073: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dax: read holderops once in daxholdernotifyfailure daxholdernotifyfailure reads daxdev-holderops twice without READONCE -- once for the NULL check and once for the indirect notifyfailure call. A concurrent fsputdax can clear...