PT-2026-82991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iblock execute pr out function where the PRO PREEMPT, PRO PREEMPT AND ABORT, and PRO RELEASE operations perform callback capability checks via ops-pr clear. An...

CVE-2026-80678: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

CVE-2026-80704: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

Linux Distros Unpatched Vulnerability : CVE-2026-80678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandge...

PT-2026-83005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the system fails to verify if the dml21 add phantom plane function successfully allocated a phantom plane. This lack of verificatio...

PT-2026-120362

Уязвимость функций parseArray, UrlencodedBodyDecoder и MultipartBodyDecoder библиотеки для работы с файлами kin-openapi связана с ошибками разыменования указателей при обработке параметра deepObject. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в...

CVE-2026-81490: NULL Pointer Dereference

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configure...

CVE-2026-80631: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80664: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...

PT-2026-82914

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the emac probe function. This occurs because devm request irq is called before devm platform ioremap resource, allowing an early interrupt to trigger...

PT-2026-83271

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The web poe alive rmtip post handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted...

PT-2026-83354

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

CVE-2026-76649: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-77217: Stack-based Buffer Overflow

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

CVE-2026-80632: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996inittxqueues When MT76NPU and CONFIGNETMEDIATEKSOCWED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996inittxqueues will dereference a NULL WED pointer. Fix...

CVE-2026-80620: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

PT-2026-82920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the iounmap function is called a second time with a NULL pointer. This occurs during the error path of the msix capability init function when msix setup interrupts...

CVE-2026-80636: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use. Revert commit c56716c69ce1 "netfilter:...

CVE-2026-75125: NULL Pointer Dereference

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted...

Linux kernel SPI DoS

The vulnerability in the drivers/spi/spi.c component of the Linux kernel system is related to pointer dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...