PT-2026-69682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the analogix dp component of the drm/rockchip driver where the platform get resource function lacks a proper return value check. This omission can lead to a NULL point...

PT-2026-69639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the ttm pool backup function fails to properly account for NULL values or backup handles. These entries cannot be passed to the set pages array ...

CVE-2026-71967: NULL Pointer Dereference

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

CVE-2026-68282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: Add missing error check for platformgetresource Add missing error check for platformgetresource return value to prevent NULL pointer dereference when memory resource is not available...

CVE-2026-68191: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irqworksync called from rhashtabledestroy. Two hash tables are affected: 1. ath12klinks...

PT-2026-69901

Name of the Vulnerable Software and Affected Versions OP-TEE OS versions prior to 4.10.0 commit 0aadfc2 Description A null pointer dereference occurs in the Widevine pseudo-TA open session handler when CFG WIDEVINE PTA is enabled. Normal World clients can trigger this by opening a session directl...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.4 contains a security vulnerability. This vulnerability stems from the use of devgetdrvdatamaster in the unbind function by the hvs and v3d drivers. As a result of the removal of vc4-drm before its dependent drivers, a null pointer dereferencing occurs...

PT-2026-69466

Name of the Vulnerable Software and Affected Versions fastschema versions prior to 0.15.2 Description A NULL pointer dereference occurs when the server fails to validate that a pointer is non-nil before use. An unauthenticated remote attacker can trigger a fatal panic that crashes the server...

CVE-2026-68273: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...

CVE-2026-68194: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7921rxcheck and mt7921queuerxskb dispatch it to mt7921mactxfree on every bus. mt7921mactxfree cleans the DMA tx queues with...

PT-2026-69673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Issues exist in the context pstate handling code within the drm/amdgpu component. The most critical problems include potential use-after-free and NULL pointer dereferences during context...

CVE-2026-68273: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...

PT-2026-69541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the afiucv hs callback syn function. This occurs when the function attempts to allocate a child socket using GFP ATOMIC and the allocation fails,...

CVE-2026-68195: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7615rxcheck and mt7615queuerxskb dispatch it to mt7615mactxfree on every bus. mt7615mactxfree cleans the DMA tx queues with...

CVE-2026-68226: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pciioremapbar in cx23885devsetup. If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, an...

PT-2026-69595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7615 wireless driver where PKT TYPE TXRX NOTIFY events, which are intended only for mmio buses, are dispatched to mt7615 mac tx free across all bus types. This...

CVE-2026-68141: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: net/afiucv: fix NULL deref in afiucvhscallbacksyn afiucvhscallbacksyn allocates the child socket with GFPATOMIC. If the allocation fails, nsk is NULL. The connection-refused path is entered when the listen state check fails, the...

CVE-2026-68260: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

CVE-2026-11810: NULL Pointer Dereference

The UpdateHub firmware-update agent's probe handler zimplupdatehubprobe in subsys/mgmt/updatehub/updatehub.c parses the JSON metadata returned by the update server into a fixed two-level nested-array struct. After parsing it validates only the outer array length objectslen != 2 and then...

PT-2026-69594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the RX worker when handling PKT TYPE TXRX NOTIFY events on non-mmio buses, such as USB and SDIO. The functions mt7921 rx check and mt7921 queue rx sk...