PT-2026-64707

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd cmipci spdif controls does not check the return value before dereferencing kctl-id.device, which can lead to a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-64484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before...

Linux Distros Unpatched Vulnerability : CVE-2026-64295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: pageext: add count limit to pageextiternext to prevent invalid PFN access The pageext iteration API does not validate if the PFN still belongs to a valid...

Linux Distros Unpatched Vulnerability : CVE-2026-64258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: remove request-less entries from entwreqqueue to fix NULL deref If a copy into the userspace ring buffer fails, a request will be terminated and...

Linux Distros Unpatched Vulnerability : CVE-2026-64325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at...

Linux Distros Unpatched Vulnerability : CVE-2026-64412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to requestmodule...

Linux Distros Unpatched Vulnerability : CVE-2026-64451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix NULL pointer dereference in funcsetflag funcsetflag dereferences tr-currenttraceflags before verifying that the current tracer is actually the...

Linux Distros Unpatched Vulnerability : CVE-2026-64457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NU...

PT-2026-64638

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker debugfs add creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both count objects and scan objects, which is not...

PT-2026-64703

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd gf1 pcm volume control does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

PT-2026-64516

In the Linux kernel, the following vulnerability has been resolved: mm: page ext: add count limit to page ext iter next to prevent invalid PFN access The page ext iteration API does not validate if the PFN still belongs to a valid section while advancing the iterator. When dynamically adding memo...

PT-2026-64626

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci conn: Fix null ptr deref in hci abort conn hci abort conn read hci skb eventhdev-sent cmd when a connection was pending, but hdev-sent cmd can be NULL while req status is still HCI REQ PEND, leading to a NULL point...

PT-2026-64701

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. The ice1712 driver calls snd ctl new1 without checking the return value before dereferencing the pointer in multiple places...

PT-2026-64648

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORT ID DJ SHORT related user initiated OOB write" added validation for the DJ short output report, but the error...

PT-2026-64637

In the Linux kernel, the following vulnerability has been resolved: mm: swap cgroup: fix NULL deref in lookup swap cgroup id on swapless host lookup swap cgroup id passes swap cgroup ctrltype.map to swap cgroup id lookup without checking that the type was ever registered via swap cgroup swapon. O...

Linux Distros Unpatched Vulnerability : CVE-2026-64489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return valu...

Linux Distros Unpatched Vulnerability : CVE-2026-64482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before...

Linux Distros Unpatched Vulnerability : CVE-2026-64417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both count and scan debugfs files unconditionally. That assumes every shrinker...

Linux Distros Unpatched Vulnerability : CVE-2026-64227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device ID...

PT-2026-64633

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request module...