PT-2026-94513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid pointer dereference occurs in the ksmbd stop durable scavenger function. This happens when ksmbd launch ksmbd durable scavenger fails to run the kernel thread, resulting in th...

CVE-2026-92500: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write state and fix race Instead of checking the live inode state ext4hasinlinedatainode and ext4testinodestateinode, EXT4STATEMAYINLINEDATA in the writeend handlers, use the fsdata parameter...

CVE-2026-93078: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Set Features output buffer smaller than the header cxlctlsetfeature sizes its output buffer from the user's fwctlrpc.outlen but never checks it is large enough to hold even the fwctlrpccxlout header. With...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

PT-2026-94748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the md module where md start sync checks for spare configuration changes before acquiring the reconfig mutex. Because the rdev state can change before the mute...

PT-2026-94787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the single-doorbell completion path when the ufshcd compl one cqe function is called with a NULL CQE Completion Queue Entry. If no command is...

PT-2026-94463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the xsk rcv function within the multi-buffer path. The issue occurs because xsk buff alloc is called in a loop without verifying its return value...

CVE-2026-93073: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dax: read holderops once in daxholdernotifyfailure daxholdernotifyfailure reads daxdev-holderops twice without READONCE -- once for the NULL check and once for the indirect notifyfailure call. A concurrent fsputdax can clear...

PT-2026-94911

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mlxbf-pmc driver when it is force-bound to a device that lacks an ACPI companion object. This happens because the mlxbf pmc probe function passes...

PT-2026-94439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth L2CAP implementation. For L2CAP sockets that do not own sk-sk socket, a lockless read of l2cap pisk-chan within the l2cap sock cleanup listen...

PT-2026-94366

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description A flaw in the XML catalog parsing process allows a local user or an attacker to trigger a NULL pointer dereference by providing a specially crafted XML catalog. This occurs when a nextCatalog...

CVE-2026-93149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: avoid NULL skb in stop queue drain mac80211hwsimstop drops any frames left in data-pending. The loop currently checks skbqueueempty and then dequeues separately. That split is racy with TX status handling,...

CVE-2026-93056: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

CVE-2026-92492: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks cpufreqcpuget returns NULL when no cpufreq policy is associated with the requested CPU, for example because the CPU is offline or the policy has already been torn...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.14 contains a security vulnerability. This vulnerability stems from race conditions occurring during the probe/remove processes, where workqueue and netdev are involved. The VF workqueue is not initialized before registering with netdev. As a result, ndosetrxmode may...

PT-2026-94504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where smb2 lock adds a ksmbd lock to the rollback list before the asynchronous work is allocated and registered. If these operations fail, the rollbac...

CVE-2026-90115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...

PT-2026-94914

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16 Description An issue exists in the aspeed udc gadget driver where the ast udc probe function allocates a coherent DMA Direct Memory Access buffer to serve as the backing store for endpoint buffers. Because t...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.19. It stems from the nvme-apple driver failing to destroy its management queue when being removed, causing timeout timers and work to remain active on queues that are about to be freed. This may lead to null pointer dereferencing and kern...

PT-2026-94428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the octeontx2-pf driver when setting up representors. The af xdp zc qidx pointer, which tracks receive queues using AF XDP zero-copy, remains NULL fo...