CVE-2026-90023: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmassstorage: fix null pointer dereference in fsgcommonsetnumbuffers Previously fsgnumbuffersvalidate was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2...

PT-2026-93553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 vgic-its component where the vgic its save ite function unconditionally dereferences a NULL collection. This occurs when a guest issues a sequence of MAP...

PT-2026-93604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference exists in the kexec extra fdt size ppc64 function. On platforms lacking reserved memory regions, the get reserved memory ranges function may return 0...

PT-2026-93634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the dw-edma component of the DMA engine. The function dw edma irq request passes the dw edma irq structure to request irq before the dw edma channel...

CVE-2026-90012: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: Fix DMA mapping ownership on partial map failure If RX mapping fails after TX mapping succeeds, spimapmsg unmaps TX but leaves txsgmapped set. If TX mapping fails on a later transfer, mappings created for earlier transfers...

PT-2026-93386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the Qualcomm rmnet driver. The function rmnet map deaggregate allocates sub-frames using alloc skb but leaves the skb-dev variable as NULL. While rmn...

CVE-2026-89912: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and vgicitssaveite dereferences it unconditionally. A guest that issues MAPD,...

Linux Distros Unpatched Vulnerability : CVE-2026-89849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path qla2x00statusentry filters out non- TYPESRB entries and the SRBNVMECMD, SRBBIDICMD and SRBTMCMD type...

PT-2026-93895

A Null Pointer Dereference in the mk sched event close function mk server/mk scheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2026-89874: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2asyncmatchnotify creates ancillary media links before adding asc-ascsubdeventry to sd-asclist. If ancillary link creation fails, the function jumps to...

CVE-2026-90019: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fix null pointer dereference in usbputfunctioninstance usbputfunctioninstance attempts to dereference fd inside fi struct to get mod in uvcallocinst error path. However, fd is not allocated until later in...

CVE-2026-89977: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: check MMIO mapping errors in probe devmplatformioremapresource returns an error pointer when the register resource cannot be mapped. ethosuprobe stores it and continues until initialization dereferences it through...

CVE-2026-89809: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix scope of mqdmgr dereference in pqmdebugfsmqds Reading /sys/kernel/debug/kfd/mqds while a process holds an active KFD queue triggers a NULL pointer dereference because the for loop that calls mqdmgr-debugfsshowmqd ...

CVE-2026-89798: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rpcrdma: arm rndone before publishing the notification rpcrdmarnregister inserts @rn into rdxa with xaalloc before storing the caller's callback in rn-rndone. The xarray makes @rn reachable to rpcrdmaremoveone, which walks rdxa a...

PT-2026-93599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the vfio ap device driver for s390. The issue occurs within the call stack of the vfio ap on cfg changed and vfio ap on scan complete functions, wher...

PT-2026-93490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx driver where the qla2x00 status entry function fails to properly validate SCSI Request Blocks SRB before they enter the SCSI fast path. The function filter...

CVE-2026-77692: NULL Pointer Dereference

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

PT-2026-93525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mtk-mdp3 platform media component. This happens when the system fails to look up the SCP System Control Processor because its driver has not yet...

PT-2026-93492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2x00 dfs fce write function within the scsi qla2xxx driver. The function calls kstrtoul using a NULL result pointer, which leads to a NULL pointer dereference a...

Linux Distros Unpatched Vulnerability : CVE-2026-90019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fix null pointer dereference in usbputfunctioninstance usbputfunctioninstance attempts to dereference fd inside fi struct to get mod in uvcallocins...