GHSA-8Q49-2H5H-434X

creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...

SUSE CVE-2026-64241

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce clock reference leak: The debounce clock bank-dbclk is obtained using...

CVE-2026-66373

CVE-2026-66373 affects Redis before 8.8.0. An authenticated attacker can achieve remote code execution by sending a RESTORE payload in a scenario where the same NACK (pending entry) is referenced by more than one consumer; deleting both consumers via XGROUP DELCONSUMER leads to a double free. Thi...

PT-2026-64566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the usb gadget f printer component. The printer open function increments the dev-kref variable regardless of whether the open operation is successful. When the...

PT-2026-64647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the io uring/nop component when handling file references. The issue arises when a NOP request is submitted with the IOSQE FIXED FILE flag set but without the IORI...

PT-2026-64552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the vep dequeue function within the usbip vudc component. The issue occurs because vep alloc request fails to initialize the vrequest-udc variable...

PT-2026-64542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the NVMe target RDMA component. The function nvmet rdma queue connect invokes nvmet rdma find get device, which uses kref get to acquire a reference to t...

CVE-2026-64499: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119triggeredbufferpreenable resumes the device with pmruntimeresumeandget before starting a conversion. If i2csmbuswritebyte fails, the function returns the erro...

PT-2026-64553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB ULPI Ultra Low Power Interface component during early device registration failures. The issue arises because the allocated device name is not freed when...

Linux Distros Unpatched Vulnerability : CVE-2026-64376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmwareloader: fix device reference leak in firmwareuploadregister firmwareuploadregister -...

Linux Distros Unpatched Vulnerability : CVE-2026-64370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in...

Linux Distros Unpatched Vulnerability : CVE-2026-64356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfsdqinodemetadircreate If xfsmetadircreate fails in...

PT-2026-64714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the mpl115 read raw function. The function acquires a runtime PM reference using pm runtime get sync before reading pressure or temperature...

PT-2026-64549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB gadget functionfs module. In the ffs dmabuf transfer function, a ffs dma fence object is allocated and initialized, but the initial reference count is not...

PT-2026-64655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP implementation. The function l2cap chan timeout operates asynchronously and accesses the chan-conn variable. If a connection is...

PT-2026-64482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fuse-uring component. The function fuse uring async stop queues may execute after the final reference on the ring-queue refs variable has been droppe...

PT-2026-64627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the Bluetooth component. The bt accept dequeue function drops a temporary reference before calling bt accept unlink, which subsequently drops the que...

PT-2026-64668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipu7 media staging component where double-free and use-after-free conditions occur during error handling. In the functions ipu7 isys init and ipu7 psys init, the...

PT-2026-64564

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB ldusb component. The mutex unlock function may access the mutex structure after the lock has been released, meaning it cannot be used to manage t...

PT-2026-64522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the scmi regulator probe function. This happens because the function calls of find node by name, which increments the reference count of the returned...