CVE-2026-89966: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlbcma: fix null nodemask dereference in hugetlbcmaallocfrozenfolio allocbuddyhugetlbfoliowithmpol can pass a NULL nodemask to allocfreshhugetlbfolio as a fallback to allocate from all nodes. If order is gigantic,...

PT-2026-93653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SPI subsystem where a partial failure during DMA mapping can lead to incorrect ownership of the mapping. Specifically, if an RX mapping fails after a TX mapping...

PT-2026-93389

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the xfrm6 input addr function. The issue occurs when the secpath is full, caused by an off-by-one error in the depth check. When the transport-mode recei...

PT-2026-93528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A teardown order bug exists in the ov7740 remove function. The driver destroys the mutex before freeing the V4L2 control handler that depends on it, which can cause a use-after-destroy...

PT-2026-93386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the Qualcomm rmnet driver. The function rmnet map deaggregate allocates sub-frames using alloc skb but leaves the skb-dev variable as NULL. While rmn...

PT-2026-93469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdgpu vram mgr init function where drmm cgroup register region is called before INIT LIST HEAD and gpu buddy init. If drmm cgroup register region fails, the...

CVE-2026-89828: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpuvrammgrinit drmmcgroupregisterregion is called before INITLISTHEAD and gpubuddyinit in amdgpuvrammgrinit. If it fails, the function returns early and bypasses those initializations. Since...

PT-2026-93802

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A flaw in the readField function allows a malicious or compromised AMQP broker to trigger an unhandled runtime panic, leading to a Denial of Service DoS by crashing the client process. T...

Linux Distros Unpatched Vulnerability : CVE-2026-89866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU register...

PT-2026-93507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 media driver where the system fails to resume the device before setting the End of Stream EOS flag. The process of setting the EOS flag involves communicatin...

CVE-2026-89963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexecfile: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in kexecextrafdtsizeppc64. On platforms without any reserved memory regions,...

Linux Distros Unpatched Vulnerability : CVE-2026-89966

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlbcma: fix null nodemask dereference in hugetlbcmaallocfrozenfolio allocbuddyhugetlbfoliowithmpol can pass a NULL nodemask to allocfreshhugetlbfolio as...

Linux Distros Unpatched Vulnerability : CVE-2026-89963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/kexecfile: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in...

CVE-2026-61544

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TLS 1.3 handshake fragment until after t...

libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

Summary libp2p-quic can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp2p TLS certificate and delays the final TLS 1.3 handshake fragment until the certificate expires. This is remotely reachable by a network peer and can crash applications exposing a...

GHSA-5HQ8-QHWW-JM7Q libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

Summary libp2p-quic can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp2p TLS certificate and delays the final TLS 1.3 handshake fragment until the certificate expires. This is remotely reachable by a network peer and can crash applications exposing a...

CVE-2026-61544

libp2p-quic (part of the official Rust libp2p networking stack) is vulnerable to a remote unauthenticated denial-of-service prior to version 0.13.1. During an inbound QUIC handshake, a malicious peer can present a valid short-lived libp2p TLS certificate and delay the final TLS 1.3 handshake frag...

CVE-2026-61544 libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TLS 1.3 handshake fragment until after t...

EUVD-2026-79501

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TLS 1.3 handshake fragment until after t...

CVE-2026-61544 libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TLS 1.3 handshake fragment until after t...