PT-2026-117005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel's AMD display driver during MST mode validation. The functions dm dp mst is port support mode and get conv frl bw access aconnector-dc sink-dsc caps a...

PT-2026-117068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel during netdevice registration failure. The pfcp newlink function creates a UDP socket before calling register netdevice. If...

PT-2026-117031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the Linux kernel when the mctp add dev function links a new mctp dev into dev-mctp ptr before the mdev-dev pointer is assigned. This creates a race...

PT-2026-116971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the tty port implementation. When drivers use the tty port tty vhangup function to synchronously hang up ports during deregistration, such as during a physical...

PT-2026-117004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the dc state create copy function can return NULL during an allocation failure. The dm suspend function fails to properly handle this NULL return, continuing...

PT-2026-116812

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the debug info copy function. This happens when debug register static fails, as it clears areas, active pages, and active entries while leaving the...

PT-2026-116695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ccw device get util str function. This happens when a channel path registry entry associated with a CHPID is removed while the subchannel's PMCW...

PT-2026-116696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the perf/core component. The function perf pmu sched task passes a NULL value to pmu-sched task because cpc-task epc is only non-NULL when a...

PT-2026-116856

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 implementation where the pkvm vcpu init sve function incorrectly clears KVM ARM VCPU SVE within kvm-arch.vcpu features upon failure. Because vcpu has sve...

PT-2026-116837

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbnic driver where the allocation path for standalone channels excludes FBNIC MAX TXQS from the layout. In configurations with 64-Tx/64-Rx, the system records 128...

PT-2026-116975

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the cdns3 pci probe function when handling the Cadence USBSS controller, which is a two-function PCI device. The issue occurs when the second functio...

PT-2026-116784

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs during the unbind process of MT7531 and MT7621 devices. While the devm regulator get in probe and regulator enable in mt7530 setup are guarded by the switch id,...

PT-2026-116835

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbnic driver where the num napi variable, which tracks the count of live NAPI vectors, is not reset when those vectors are freed during power management paths. Thi...

CVE-2026-98785: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips dmgpuresettoggleinterrupts and continues execution, returning success...

CVE-2026-98676: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

CVE-2026-98764: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix NULL pointer dereference in FUNCTIONFSENDPOINTDESC When user space sets up FunctionFS with only full-speed descriptors e.g., flags = FUNCTIONFSHASFSDESC and the gadget operates at a higher speed such as...

PT-2026-116907

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix NULL dereference in tb remove work There is a slight race between tb remove work and tb domain remove which leads to dereferencing a NULL tb-root switch pointer inside tb free unplugged xdomains: Thread A Thread ...

CVE-2026-98695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Serialise the callbacks using the tty port mutex and add the missing...

CVE-2026-98580: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix race condition in acceptqueue lifecycle In nfcllcpsocketrelease, sockets and listener accept queues are walked under the local sockets rwlock and bhlocksock. However, bhlocksock does not synchronise against...

CVE-2026-98756: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix NULL pointer dereference in cdns3pciprobe The Cadence USBSS controller is a two-function PCI device. The first probed function allocates the driver data and stores it with pcisetdrvdata, while the second function...