CVE-2026-68141 net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()

In the Linux kernel, the following vulnerability has been resolved: net/afiucv: fix NULL deref in afiucvhscallbacksyn afiucvhscallbacksyn allocates the child socket with GFPATOMIC. If the allocation fails, nsk is NULL. The connection-refused path is entered when the listen state check fails, the...

K000162854: Linux Kernel vulnerability CVE-2026-53080

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of "old" filters before change Like pointed out by Sashiko 1, since commit ed76f5edccc9 "net: sched: protect filterchain list with filterchainlock mutex" TC...

PT-2026-69703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference error occurs in the hvs and v3d drivers within the drm/vc4 component. This happens because the vc4 hvs unbind and vc4 v3d unbind functions attempt to retrieve driver...

CVE-2026-68243: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to apply I915CONTEXTPARAMSSEU to the same slot N will deref NULL. Fix that...

PT-2026-69722

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the Reliable Datagram Sockets RDS implementation when the system is booted with the ipv6.disable=1 parameter. In this configuration, the inet6 addr lst is no...

PT-2026-69727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wanxl pci init one function where the allocated card is stored in driver data before the PLX BAR Base Address Register, a mechanism used by PCI devices to request...

CVE-2026-68242: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...

CVE-2026-68337: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpfnetcontext The bpfredirect helpers and skbdoredirect obtain the per-task bpfredirectinfo via bpfnetctxgetri, which dereferences the current-bpfnetcontext unconditionally. That context is...

PT-2026-69536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic Receive Offload GRO implementation where packets marked with the flush flag in NAPI GRO CBskb may be incorrectly re-aggregated. This occurs because the skb...

PT-2026-69576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the mmiotrace component of the tracing subsystem. When the mmio pipe open function fails to locate a PCI device, the hiter-dev variable is assigned a...

Linux Distros Unpatched Vulnerability : CVE-2026-68186

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well...

CVE-2026-68186: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...

CVE-2026-68322: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

Linux Distros Unpatched Vulnerability : CVE-2026-68243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to...

PT-2026-69665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access and a null dereference occur in the drm/xe/vm component. When the prefetch region for a Buffer Object BO Virtual Memory Area VMA is set to DRM XE CONSULT MEM ADVI...

PT-2026-69597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the mwifiex wireless driver. The function mwifiex tdls add ht oper checks for the presence of bss desc-bcn ht cap but subsequently dereferences bss...

Linux Distros Unpatched Vulnerability : CVE-2026-68141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/afiucv: fix NULL deref in afiucvhscallbacksyn afiucvhscallbacksyn allocates the child socket with GFPATOMIC. If the allocation fails, nsk is NULL. The...

Linux Distros Unpatched Vulnerability : CVE-2026-68303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use devgetdrvdatamaster in their unbind functions. Since the vc4-drm gets removed befor...

CVE-2026-68303: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use devgetdrvdatamaster in their unbind functions. Since the vc4-drm gets removed before its dependent drivers vc4hvs/vc4v3d the vc4hvsunbind/vc4v3dunbind...

PT-2026-69642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the IOCTL path when a sched engine allocation fails. This happens because intel context put is called before intel context init within the execlists create...