PT-2026-94512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB server where ksmbd server init calls ksmbd proc init before creating other server subsystems. If a procfs or percpu counter allocation failure occurs, ksmbd pr...

CVE-2026-90172: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdmaacceptfailed error path of smbdirectacceptconnectrequest, the receive io posted just above is owned by the QP recvio is set to NULL after a successful post...

PT-2026-94439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth L2CAP implementation. For L2CAP sockets that do not own sk-sk socket, a lockless read of l2cap pisk-chan within the l2cap sock cleanup listen...

PT-2026-94428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the octeontx2-pf driver when setting up representors. The af xdp zc qidx pointer, which tracks receive queues using AF XDP zero-copy, remains NULL fo...

PT-2026-94540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom cpucp mbox send data function when it is invoked via the mailbox clear channel function under PREEMPT RT. The issue arises because mailbox...

PT-2026-94520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smbdirect component of the Linux kernel where memory pools are destroyed before the Queue Pair QP during an accept failure. In the rdma accept failed error path of...

CVE-2026-92493: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active The crash issue may occur when modprobe amdpstateut on intel platform. amdpstateut: 1 amdpstateutacpicpcvalid success! amdpstateut: 2 amdpstateutcheckenabled...

PT-2026-94722

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 driver within the mt76 wifi module. The band idx value, derived from a 2-bit descriptor field ranging from 0 to 3, is used directly to index the dev-mt76.ph...

PT-2026-94733

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.3 Description An issue exists in the md/raid1 component where adding a new rdev to an existing RAID1 array with the serialize policy enabled can lead to a system crash. This occurs because the bind rdev to array...

PT-2026-94935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/mes component where a loop limit for hung queue db array was incorrectly set to only AMDGPU MAX MES PIPES iterations. On multi-XCC X-Complexity Cluster...

PT-2026-94433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...

CVE-2026-90374: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate RX bandidx before dereferencing phys bandidx comes from a 2-bit descriptor field 0-3 and was used directly to index dev-mt76.phys size MTMAXBAND == 3 and dereference the result. A corrupt or reserved...

PT-2026-94487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the FUSE filesystem when the root inode allocation fails, typically under memory pressure. The function fuse fill super submount fails to check if th...

CVE-2026-90148: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4deletelease in nfs4addlease When nfs4addlease races with a delegation return, it calls nfs4deletelease to clean up. Previously, it passed priv, which can legitimately be NULL. Passing a...

PT-2026-94514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the ksmbd ipc tree connect request function. This happens when ksmbd share config get fails during a kstrdup operation for share-name and the KSMBD...

PT-2026-99684

Heap-use-after-free in Layer method of PerlMagick could result in a crash Path Policy TOCTOU symlink race bypass in the video decoder Heap-use-after-free in the GetList method of PerlMagick could result in a crash Memory Leak in MSL decoder Denial of service when exhausting the process memory...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the bpf and cgroup components when replacing a program. This happens when an empty program attached to a cgroup is replaced by a new program that...

CVE-2026-90115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...

PT-2026-94903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rxe component where the responder state machine may reprocess a packet after the Queue Pair QP enters an error state. This occurs when do complete returns...