PT-2026-69591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the irq work sync function, which is called by rhashtable destroy, when unbinding the ath12k driver. This issue affects the ath12k link sta hash tabl...

PT-2026-69648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915 component where the active instance function fails to return NULL upon encountering an error. Specifically, the system may incorrectly return &node-base...

CVE-2026-68225: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critical pointer access in alviumctrlinit The current implementation of alviumctrlinit creates several controls in function alviumctrlinit and uses the returned pointer without check. That can cause write...

PT-2026-69586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binfmt misc module where the load misc binary function incorrectly sets the have execfd flag before the interpreter is actually opened. If the interpreter open...

CVE-2026-68243: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to apply I915CONTEXTPARAMSSEU to the same slot N will deref NULL. Fix that...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from an issue in the amdgpu context pstate processing code, where the amdgpuctxinit function does not properly hold the stablepstatectxlock lock. This may lead to reusing a locked resource after it has been...

PT-2026-69539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel during PCIe DPC Downstream Port Containment recovery. When the mlx5 driver reloads functions and replays multiport affiliation event...

PT-2026-69672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference exists in the amdgpu driver. An unprivileged process in the render group can trigger this by submitting an AMDGPU CHUNK ID CP GFX SHADOW chunk with the length ...

PT-2026-69593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the RX worker of the Linux kernel when handling PKT TYPE TXRX NOTIFY events on non-mmio buses, such as USB. The functions mt7925 rx check and mt7925...

CVE-2026-68310: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915mcubsshetlv and mt7915mcustabfertlv both run after checking HE support, then dereference the HE PHY capability returned by mt76connacgethephycap. That helper can return NULL...

PT-2026-80714

This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...

PT-2026-69745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm mpam module where the destroy component cfg function adds each RIS mbwu state object to the MPAM garbage list during component configuration destruction. Becau...

PT-2026-69947

Name of the Vulnerable Software and Affected Versions UpdateHub affected versions not specified Description The UpdateHub firmware-update agent contains a flaw in its probe handler z impl updatehub probe within subsys/mgmt/updatehub/updatehub.c. The handler parses JSON metadata from an update...

Linux Distros Unpatched Vulnerability : CVE-2026-68157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent...

PT-2026-69691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the idpf driver where a kernel NULL pointer dereference can occur. This happens when adapter-max vports is set before the successful allocation of vports, netdevs, and...

CVE-2026-68291: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: idpf: fix maxvport related crash on allocation error during init Set adapter-maxvports only after successful allocation of vports, netdevs and vportconfig buffers. This fixes possible crashes on reset or rmmod, following failed...

PT-2026-69574

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In struct trace event call, the module pointer and the refcnt atomic variable share the same memory space within a union. For dynamic events—including kprobe, uprobe, fprobe, eprobe, or...

CVE-2026-68337: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpfnetcontext The bpfredirect helpers and skbdoredirect obtain the per-task bpfredirectinfo via bpfnetctxgetri, which dereferences the current-bpfnetcontext unconditionally. That context is...

CVE-2026-68305: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drmdev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction. In some cases, BOs may be destroyed after the device is unbound but while the DRM structure remains valid,...

CVE-2026-68378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL pointer dereference in dpllmsgaddpinrefsync When a dpllpin is shared across multiple dplldevice instances and those devices are being unregistered e.g. during driver module removal, a NULL pointer dereference can...