Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when the TTY device fails to be registered before allocating a cdev. As a result, the serial core retains the port, and when the port is later removed, a NULL cdev slot is passed to cdevdel, potentially leading to a null...

CVE-2026-93176: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangli...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability stems from the cgroupbpfreplace function in kernel/bpf/cgroup.c, which fails to allocate and specify the required cgroup storage when replacing an eBPF program. As a result, the new program inherits uninitialized...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

CVE-2026-92481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: free EINT resources on unbind mtkeintdoinit creates an IRQ domain, populates it with a mapping for every EINT line and installs a chained handler on the parent interrupt, but none of these are ever released. Th...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the brcmfmac driver’s improper handling of P2P action frames when a P2P device vif is not created. This could lead to null pointer dereferencing...

PT-2026-94871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dax holder notify failure function. The function reads the holder ops variable twice without using READ ONCE, once for a NULL check and once for the indire...

PT-2026-94642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IB/isert component where the isert put login tx function sends the final Login Response before the session is registered via transport register session. If an...

PT-2026-94876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cxlctl set feature function where the output buffer size is determined by the user-provided fwctl rpc.out len without verifying if it is large enough to accommodat...

PT-2026-94414

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ftrace-direct-multi-modify sample where the ftrace direct multi init function assigns the return value of kthread run to the simple tsk variable without performing...

CVE-2026-25261: Untrusted Pointer Dereference

Memory corruption while processing rear sensor IOCTL calls...

PT-2026-94778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where tegra241 vintf init lvcmdq stores a newly allocated vcmdq pointer in the vintf-lvcmdqs array before tegra241 vcmdq alloc smmu cmdq finishes building the vcmdq-cmdq...

PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...

CVE-2026-92521: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driverdata on all paths that free the acpipciroot acpipcirootadd assigns the freshly allocated root to device-driverdata before dmardeviceadd and pciacpiscanroot. Both failure paths reach the end: label where roo...

CVE-2026-90293: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/isert: post the full-feature receive buffers after session registration isertputlogintx posts the full-feature receive buffers before transportregistersession runs, so an initiator that does not wait for the final Login Respon...

PT-2026-94487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the FUSE filesystem when the root inode allocation fails, typically under memory pressure. The function fuse fill super submount fails to check if th...

Linux Distros Unpatched Vulnerability : CVE-2026-92413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file...

CVE-2026-90228: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynszns When a host issues an Identify command with CNS 05h I/O Command Set specific Identify Namespace and CSI 02h ZNS targeting a file-backed namespace,...

CVE-2026-90405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-93124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device IDs because of devicematchdriveroverride, so platform drivers that...