CVE-2026-74514: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid which increments the reference count of struct userstruct on every invocation. But we don't decrement the count...

Linux Distros Unpatched Vulnerability : CVE-2026-74407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL...

PT-2026-72762

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcim iomap region or devm kmemdup fail, the code returns directly without cleaning up previously allocated resources: - mt76 device allocated by mt76 alloc device - p...

PT-2026-72452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the tridentfb component of the fbdev subsystem. In the trident pci probe function, memory allocated for modelist via the fb videomode to modelist function is not...

PT-2026-72675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI subsystem where the kernel fails to properly validate the ROM header and data structure address before access. On x86 64 architectures, a broken ROM space can...

CVE-2026-72487: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...

PT-2026-72458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the fbdev s3fb component. In the s3 pci probe function, memory allocated for modelist via the fb videomode to modelist function is not properly released during...

PT-2026-72335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dw-edma-pcie component of the dmaengine. The dw edma pcie probe function unconditionally copies the PCI device ID driver data to use as a template for the controll...

Linux Distros Unpatched Vulnerability : CVE-2026-72487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for...

PT-2026-72943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL bus dereference occurs in the of pci range parser one function. This issue arises because of match bus returns NULL for nodes containing ranges or dma-ranges but lacking local...

PT-2026-72849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw89 wifi driver, an issue exists in the Advanced Error Reporting AER handlers. The driver stores an ieee80211 hw pointer using pci set drvdata during probe time, but the io erro...

Linux Distros Unpatched Vulnerability : CVE-2026-74515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow registering adapter interrupts without first...

PT-2026-72517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/liquidio component where the PF SR-IOV enable path caches VF pci dev pointers in the dpiring to vfpcidev lut table using pci get device. Because the iterator...

CVE-2026-74515: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow registering adapter interrupts without first unregistering. So reject any request to enable interrupt forwarding if its...

CVE-2026-72283: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd-producer if updating IRTE for bypass fails Nullify irqfd-producer if updating the IRTE for bypass fails, as leaving a dangling pointer will result in a use-after-free if the irqfd is reachable through KVM'...

Linux Distros Unpatched Vulnerability : CVE-2026-72147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and...

PT-2026-72594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the sungem network driver. When the register netdev function fails, the gem init one function calls gem remove one, which unregisters and frees resources...

Linux Distros Unpatched Vulnerability : CVE-2026-72329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/liquidio: drop cached VF pcidev LUT The PF SR-IOV enable path caches VF pcidev pointers in dpiringtovfpcidevlut by iterating with pcigetdevice. Those entrie...

SUSE CVE-2026-68292

In the Linux kernel, the following vulnerability has been resolved: ice: prevent tstamp ring allocation for non-PF VSI types The pf-txtimetxqs bitmap tracks which Tx queues have ETF Earliest TxTime First offload enabled. This bitmap is indexed by queue number and is set by iceoffloadtxtime, which...

The vulnerability in the `pci/ctxfi/ctamixer.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the pci/ctxfi/ctamixer.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...