PT-2026-72591

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcp find fc interface currently selects the first vendor-specific...

PT-2026-72710

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by cxl driver. This means cxl driver always assumes the first p-nr targets...

PT-2026-72739

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci qca: fix NULL pointer dereference in qca dmp hdr for non-serdev device hu-serdev is NULL for hci uart attached via non-serdev paths, but qca dmp hdr unconditionally dereferences hu-serdev-dev.driver-name, causing a...

PT-2026-72349

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2 checkpoint inode During unmount, ocfs2 journal shutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2 evict inode - ocfs2 clear inode ...

PT-2026-72280

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdna drm submit execbuf passes the user-supplied command BO handle straight into amdxdna cmd submit with drv cmd == NULL. When the handle is AMDXDNA INVALID BO...

PT-2026-72695

In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super Cifs files may be put into fileinfo put wq during umounting cifs. After umount done, cifsFileInfo put final is called, which cause following BUG: BUG: kernel NULL pointer dereference,...

PT-2026-72843

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

Linux Distros Unpatched Vulnerability : CVE-2026-74441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during port unregistration where pending partner work...

Linux Distros Unpatched Vulnerability : CVE-2026-74407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL...

CVE-2026-12364 Missing user-space pointer validation in logging syscall z_log_msg_static_create allows kernel memory disclosure and denial of service

The user-space system-call verifier zvrfyzlogmsgstaticcreate in subsys/logging/logmsg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation zimplzlogmsgstaticcreate without performing any of the mandatory...

MINI-HVHG-5WJ7-93H6

Bulletin has no description...

GO-2023-2185 vulnerabilities

Vulnerabilities for packages: go...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: aactl, skaffold...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, newrelic-fluent-bit-output, docker, nats-top, cosign, terraform-docs, goreleaser, kubo, crossplane-provider-aws-iam, aws-privateca-issuer, petname, kubecolor, clickhouse-operator, kserve-modelmesh-serving, gobuster, terraform-provider-pagerduty,...

The vulnerability in the `ethernet/emulex/benet/be_cmds.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ethernet/emulex/benet/becmds.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the core/sock.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the core/sock.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the slimbus/core.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the slimbus/core.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/buffer component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fs/buffer component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `sched/act_ife.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the schedd/actife.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures...