PT-2026-61143

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1-rc5 Description A use-after-free issue exists in the AppArmor module of the Linux kernel. The aa replace profiles function iterates through the ns-rawdata list to deduplicate incoming policy blobs against existing...

PT-2026-61095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ksmbd component. The smb check perm dacl function fails to verify if the ace-size is sufficient to contain the number of sub-authorities specified by...

PT-2026-61097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 flexfiles implementation where the ff layout alloc lseg function fails to properly validate the filehandle-version array count decoded from the flexfiles...

PT-2026-61093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fuse module. The fuse try move folio function unlocks the request upon entry but fails to re-lock it during the success path. Consequently, fuse chan...

PT-2026-61145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip gre component where the changelink operation does not properly verify the CAP NET ADMIN capability within the tunnel link network namespace t-net. Because the...

PT-2026-61139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel during the handling of request key auth payloads. The problem occurs during a concurrency scenario involving the request key function an...

PT-2026-61105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the registration of I2C adapters. The i2c get adapter function allows looking up adapters by ID and takes a reference to the embedded struct device. If an...

PT-2026-61092

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the veml6075 it ms index. The veml6075 it ms array contains 5 elements, but the VEML6075 CONF IT register can return values ranging from 0 to 7. I...

PT-2026-61099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nfsd component during a race condition involving NFSv4.0 OPEN threads with the same owner string. When the find or alloc open stateowner function encounters a...

PT-2026-61125

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc5 Description Memory corruption can occur in the BPF sysctl handler. The proc sys call handler function allocates a temporary sysctl buffer using kvzalloc, which may use vmalloc for large allocations...

PT-2026-61128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system within the destroy extent node function. When the FI NO EXTENT inode flag is set, the system fails to reset the length of the largest extent to 0...

PT-2026-61086

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the virtiofs component during submount umount operations. The problem occurs when iput is called from fuse release end, which can lead to a system...

PT-2026-61122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 emulator where a guest can trigger a BUG ON in the ioeventfd datamatch process. This occurs when a guest emits a store that splits a page starting at page...

PT-2026-61130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the f2fs acl count function only validates the aggregate ACL xattr length. A malformed ACL can place ACL USER or ACL GROUP in a slot...

PT-2026-61132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the f2fs component of the Linux kernel. The problem occurs during garbage collection when the system processes the F2FS IOC GARBAGE COLLECT RANGE...

PT-2026-61102

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nfsd component when a SETACL decode failure happens. The functions nfsaclsvc decode setaclargs and nfs3svc decode setaclargs call nfs stream decode acl twice ...

PT-2026-61144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in AppArmor where the sendmsg and sendto functions, when used with the MSG FASTOPEN flag, combine the actions of connect2 and write2 to open a connection during the SYN...

PT-2026-61089

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free hazard exists in the dw8250 probe function. The function registers the 8250 port using serial8250 register 8250 port and subsequently attempts to register a clock notifi...

PT-2026-61119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HDLC PPP protocol implementation. The struct ppp allocated as hdlc-state registers timers for PPP control protocols LCP, IPCP, and IPV6CP using timer...

PT-2026-61096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the NFSv4/pNFS implementation. The function nfs4 decode mp ds addr decodes r netid and r addr opaques from a GETDEVICEINFO...