PT-2026-85656

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the ALSA scarlett2 component where the scarlett2 init notify function incorrectly uses mixer-urb, which is allocated by snd usb mixer status create for the UAC2 status...

PT-2026-85758

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17273: NULL Pointer Dereference

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2026-80752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend...

PT-2026-86267

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param set default file and param set backup file functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any P...

PT-2026-91355

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set input register device exposes the device to userspace immediately. In joycon input create it was called before joycon config rumble configures the FF RUMBLE capabili...

Linux Distros Unpatched Vulnerability : CVE-2026-80822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the...

PT-2026-85657

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the ALSA FCP component where the fcp init notify function incorrectly uses mixer-urb, which is allocated for the optional UAC2 status interrupt endpoint. On devices with...

PT-2026-85654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the nvmet execute identify nslist function. This occurs when a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I...

CVE-2026-80817: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufdioaschangeprocess when racing with ioptmapfilepages iommufdioaschangeprocess iterates every IOAS area while only holding every IOAS iovarwsem, so it assumes every area has a non-NUL...

CVE-2026-80819: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcommmutex for the deferred setup accept rfcommsockrecvmsg completes a deferred setup by calling rfcommdlcaccept without holding any RFCOMM lock: if testandclearbitRFCOMMDEFERSETUP, &d-flags...

PT-2026-86204

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SELinux component where the system fails to ensure every boolean value is defined. The p bools.nprim value is derived from the policy image regardless of the actua...

CVE-2026-80846: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80913: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...

PT-2026-85724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFRM implementation where ESP-in-TCP records are processed via the TCP strparser. The handle esp function restores skb-dev from the saved skb iif before the packet...

CVE-2026-80771: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was called before joyconconfigrumble configures the FFRUMBLE capability and...

CVE-2026-80822: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

CVE-2026-80813: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/O Command Set, nvmetexecuteidentifynslist is called with matchcss set...

CVE-2026-80912: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...

PT-2026-91308

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handle esp restores skb-dev from the saved skb iif before passing the packet into the XFRM input path. Queued TCP data ca...