CVE-2026-64222

CVE-2026-64222 concerns the Linux kernel on OcteonTX2/CN20K platforms, where the octeontx2-pf path has a double-free in pool->stack during AQ initialization failure. Specifically, otx2_pool_aq_init() frees pool->stack on mailbox sync or retry allocation failure but does not null out the poi...

PT-2026-64337

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2 pool aq init frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2 sq aura pool init unwinds the partial...

Microsoft Windows - 'nt!NtQueryInformationProcess (ProcessImageFileName)' Kernel 64-bit Pool/Stack Memory Disclosure

/ We have discovered that the nt!NtQueryInformationProcess system call invoked with the ProcessImageFileName 0x1B information class discloses uninitialized kernel memory to user-mode clients. The vulnerability affects 64-bit versions of Windows 7 to 10. According to the ZwQueryInformationProcess...