PT-2026-72247

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ixp4xx hss probe function where two HDLC netdevs are allocated instead of one. The first allocation is stored in ndev, initialized, and registered via register hdl...

PT-2026-72262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vub300 driver. The driver manages controller state lifetime using vub300-kref, where vub300 delete frees the mmc host once the last reference is...

PT-2026-72197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the mediatek power domain driver. The driver unconditionally attempts to perform cleanup for DIRECT CTL domains when a probe fails for HW VOTER...

PT-2026-72957

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ALSA 6fire driver. The driver fails to handle a pending USB Request Block URB—a data structure used to manage USB communication—during the error...

PT-2026-72769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC amd acp-sdw-legacy component where the create sdw dailinks function iterates through soc dais until it finds an entry with the initialised flag cleared. Becau...

PT-2026-72464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the metronomefb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is n...

PT-2026-72462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the hecubafb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is not...

PT-2026-72447

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC mediatek mt8192 driver where the AFE probe calls of reserved mem device init. While the driver correctly falls back to preallocated buffers if no reserved...

PT-2026-72461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the efifb probe function within the fbdev efifb component. The issue arises because the string returned by the fb get options function is not properly freed by th...

PT-2026-72448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the MT8192 AFE probe, runtime Power Management PM is enabled temporarily during the reinitialization of the regmap cache from hardware. The process uses the pm runtime get sync functi...

PT-2026-73005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nct6775-core hardware monitoring hwmon component. The code incorrectly used the register array size of the NCT6106 for the NCT6116, which only possesses three...

Linux Distros Unpatched Vulnerability : CVE-2026-74505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it...

SUSE CVE-2026-68360

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

SUSE CVE-2026-68371

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...

SUSE CVE-2026-68373

In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, restic, k3s, osv-scanner, cilium-cli, sigstore-scaffolding, cloudnative-pg, grpc-health-probe, tflint, dagger, k8sgpt, falcosidekick, guac, fulcio, pulumi-language-dotnet, rqlite, terraform-provider-google, zarf, step-ca, ksops, terraform-docs, opa,...

Malicious code in @khaznatech/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6d321090b3f66b7766ca73a5cebf1a2d3ab2908d8d31f8423616c8094ec0a8 The package declares a preinstall script install-report.js that runs on npm install. It reads os.hostname and the current working directory basename...

SUSE CVE-2026-68207

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

SUSE CVE-2026-68210

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...

SUSE CVE-2026-68215

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...