CVE-2026-89547: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svccreate initializes three per-pool percpucounter stats and ignores every return value. On SMP, percpucounterinit fails when allocpercpugfp cannot satisfy the allocation, leaving...

PT-2026-90486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in the iomap bio read folio range sync function. This happens because fs bio integrity alloc may not allocate a bio integrity payload when PI...

PT-2026-90433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zram module where the zram destroy comps function resets all compressors to NULL, including the primary one. This creates an invalid device state because the strcm...

PT-2026-96339

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add build skb...

PT-2026-90450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the uvcg video init function. When kthread run worker fails, the system attempts to log an error using uvcg err. However, because the video-uvc point...

CVE-2026-80956: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...

PT-2026-90449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB gadget UVC component where the uvc function bind and uvc function unbind functions fail to set pointers to NULL after freeing them. Specifically, in the error...

CVE-2026-89511: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add buildskb support...

CVE-2026-89505: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without methodelm The legacy write path dispatches through a uverbsapiwritemethod, but the uverbsattrbundle passed to provider code does not have an ioctl method element. If malformed provider...

PT-2026-90201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lockd component where the nlm traverse files function pins the current file but fails to pin the saved next pointer across a mutex unlock for nlm inspect file. Thi...

PT-2026-90357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the CIFS component. When the cifs file set size function finds a writable file handle via find writable file, it borrows tcon and server from the handle'...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107278 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads uevent device...

PT-2026-90122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ravb network component where the system may dereference a NULL pointer when querying the index of a PTP Precision Time Protocol clock before the first open...

PT-2026-90123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the phylink inband caps function where the PCS returned by mac select pcs is only checked for NULL values. Because mac select pcs can also return an error pointer, the...

CVE-2026-89442: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user-supplied socketid with 'socketid topologymaxpackages', but isstcommon.sstinst is allocated with topologymaxpackages entries, so the vali...

PT-2026-90093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the dm-stats component when the allocation of per-cpu data via the dm kvzalloc function fails. In such cases, the system jumps to the out label and executes the dm stat...

PT-2026-90158

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ISST driver. The isst if clos assoc function incorrectly validates the user-supplied socket id using a greater-than comparison against topolog...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107309 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before used WHAT & HOW Poniters, such as dc-clkmgr, are null...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107270 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The return value of acpifetchacpidev...

RockyLinux 10 : gstreamer1-plugins-base (RLSA-2026:66460)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...