PT-2026-69324

Name of the Vulnerable Software and Affected Versions Mullvad wireguard.sys version 0.10.1 Description An issue exists in the IOCTL Handler component where the AdapterState function fails to properly update the reference count. This flaw requires local access to be exploited. Recommendations At t...

PT-2026-69580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the intel th component when handling MSC outputs. The function intel th output open uses bus find device by devt to look up an output device, which creates a...

PT-2026-69615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the radio-si476x media component where the si476x radio probe function registers radio-v4l2dev before allocating V4L2 controls and registering the video device. If the...

PT-2026-69827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the host1x bo clear cached mappings function. This occurs because host1x bo unpin drops the last reference to the mapping and frees it, making subsequent...

PT-2026-69733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dpaa2-switch component. The fsl mc get endpoint function returns a MAC endpoint device with a reference acquired via device find child. This device is stored ...

PT-2026-69603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Cleanup bugs exist in the vivid init function. A reference leak occurs when platform device register fails because the failure path jumps to free output strings without dropping the devi...

PT-2026-69731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dpaa2-eth component. The fsl mc get endpoint function returns a MAC endpoint device with a reference acquired via device find child, which is then stored in...

PT-2026-69605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the v4l2-fwnode component where the helper function v4l2 async register subdev sensor incorrectly overwrites the subdevice owner. This occurs because the function call...

CVE-2026-68203: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs in vividinit When platformdeviceregister fails in vividinit, the embedded struct device in vividpdev has already been initialized by deviceinitialize, but the failure path jumps to freeoutputstrings...

CVE-2026-68371: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...

CVE-2026-19380: Improper Update of Reference Count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

Linux Distros Unpatched Vulnerability : CVE-2026-68371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe...

Linux Distros Unpatched Vulnerability : CVE-2026-68229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses...

Linux Distros Unpatched Vulnerability : CVE-2026-68180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference...

Linux Distros Unpatched Vulnerability : CVE-2026-68205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-fwnode: Fix subdev owner overwritten in v4l2asyncregistersubdevsensor The v4l2 helper v4l2asyncregistersubdevsensor calls v4l2asyncregistersubdev,...

Linux Distros Unpatched Vulnerability : CVE-2026-68203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: fix cleanup bugs in vividinit When platformdeviceregister fails in vividinit, the embedded struct device in vividpdev has already been initialized...

Linux Distros Unpatched Vulnerability : CVE-2026-68422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix root leak if its reloc root is unexpected in mergerelocroots If we have an unexpected relocroot for our root, we jump to the out label but never drop...

Linux Distros Unpatched Vulnerability : CVE-2026-68382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy...

PT-2026-69771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the omap2430 probe function where it stores pdev-dev.of node in a local np variable. Because this is a borrowed pointer and the function does not take a reference to i...

PT-2026-69656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the detect link and local sink function within the drm/amd/display component. The prev sink reference is retained using the dc sink retain function at the start o...