PT-2026-94537

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where configfs register subsystem is called before register blkdev in the null init function. When null blk is used as a module, a race condition...

PT-2026-94685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial core where serial core add one port performs fallible allocations for uport-tty groups after uart configure port, which may register the console. If this...

PT-2026-94532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the null blk driver where attribute store methods generated with NULLB DEVICE ATTR do not use locks when updating device configurations. Because the NULLB DEV ...

PT-2026-94866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the teardown of Display Manager DM I2C adapters. Because these adapters may remain visible to userspace while the teardown process is active, a concurrent...

PT-2026-94848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Multiple issues occur in the ipoctal component when a device is removed while a tty session remains active. These include a Use-After-Free UAF of struct ipoctal because the remove callba...

PT-2026-94745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom SCM driver during the probe process. In qcom scm probe, the function devm request threaded irq is called before the scm variable is publishe...

PT-2026-94777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/tegra241-cmdqv component where the error interrupt service routine ISR is not properly synchronized with VINTF initialization and deinitialization. The...

PT-2026-94787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the single-doorbell completion path when the ufshcd compl one cqe function is called with a NULL CQE Completion Queue Entry. If no command is...

PT-2026-94801

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.6.0-0010.rc1.ctl4 Description A kernel NULL pointer dereference occurs when the amd pstate ut driver is loaded via modprobe on non-AMD platforms, such as Intel platforms. This issue is triggered within the amd pstate ut...

PT-2026-94630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb-legacy component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the san probe function when installing the GSBUS address space handler. This happens because the function dereferences the result of ACPI COMPANION...

PT-2026-94628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm runtime...

PT-2026-94645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the sun4i crtc init function returns NULL instead of an error pointer when layer initialization fails. Because the caller function sun4i...

PT-2026-94550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mpt3sas SCSI driver where the base release memory pools function unconditionally frees every entry in the ioc-pcie sg lookup array. This includes entries that were...

CVE-2026-90202: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers basereleasememorypools unconditionally frees every ioc-pciesglookup entry, including ones the setup loop never allocated after a partial failure, causing a "bad dma" warni...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

PT-2026-94535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the null blk driver when a zoned device is powered off and on repeatedly. The null init zoned dev function allocates the dev-zones array during power-on, but null...

CVE-2026-90281: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...

CVE-2026-90337: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serialcoreaddoneport allocates uport-ttygroups after uartconfigureport, which may register the console. If the allocation fails, the driver unwinds the po...