CVE-2026-64338

CVE-2026-64338 is a stale pointer vulnerability in the Linux kernel's uss720 USB driver (drivers/usb/misc). During probe, a parport is registered before reading the 1284 register; if get_1284_register() fails, the error path releases the driver's private data but leaves the parport registered, so...

EUVD-2026-48882

In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720probe registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get1284register fails, the error path drops the driver...

CVE-2026-64305

CVE-2026-64305 is a race condition in the Linux kernel's Intel QAT crypto driver (crypto/qat). The service_table list is protected by service_lock when entries are added or removed, but several functions (adf_dev_init, adf_dev_start, adf_dev_stop, adf_dev_shutdown, and notifier callbacks) iterate...

CVE-2026-64287 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound usedlrs when flushing the pKVM hyp vCPU flushhypvcpu copies the host vGIC state into the hyp's private vCPU on every run. The vGIC list register save and restore use usedlrs as their loop bound and expect it to...

EUVD-2026-48984

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When mms114readreg reads the touch data packet from the device into the touch...

CVE-2026-64270 Input: mms114 - reject an oversized device packet size

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...

PT-2026-64559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the uss720 probe function where a parport is registered before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If the get 1284 register...

CVE-2026-64349: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix dwc3readl and dwc3writel calls in dwc3ulpisetup The dwc3ulpisetup calls the register read and write calls with dwc3-regs when both these calls take the dwc3 structure directly. Chnage these two calls to fix the...

PT-2026-64508

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the flush hyp vcpu function copies the host vGIC state into the hyp's private vCPU without validating the used lrs value. Because used lr...

Linux Distros Unpatched Vulnerability : CVE-2026-64376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmwareloader: fix device reference leak in firmwareuploadregister firmwareuploadregister - fwcreateinstance - deviceinitialize After fwcreateinstance succeeds...

PT-2026-64597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the firmware loader. In the firmware upload register function, if alloc lookup fw priv fails after fw create instance has successfully executed, the system cal...

PT-2026-64696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio/pci component where the VGA arbiter client is not released upon a failure in the vfio pci core register device function. This occurs because a re-ordering of...

Linux Distros Unpatched Vulnerability : CVE-2026-64475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfio/pci: Release the VGA arbiter client on registerdevice failure The re-order in the Fixes commit below displaced vfiopcivgainit as the last failure point of...

Linux Distros Unpatched Vulnerability : CVE-2026-64349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: dwc3: fix dwc3readl and dwc3writel calls in dwc3ulpisetup The dwc3ulpisetup calls the register read and write calls with dwc3-regs when both these calls ta...

The vulnerability of the netsec_register_mdio() function in the drivers/net/ethernet/socionext/netsec.c file of the Linux kernel’s network adapter driver module allows a hacker to cause a service failure.

The vulnerability of the netsecregistermdio function in the drivers/net/ethernet/socionext/netsec.c file of the Linux network adapter driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pci_register_host_bridge() function in the drivers/pci/probe.c module of the Linux system’s PCI device driver allows a hacker to cause a service failure.

The vulnerability of the pciregisterhostbridge function in the drivers/pci/probe.c file of the Linux PCI device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-63941

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architecture. This vulnerability allows a guest hypervisor with Virtualization Host Extensions VHE to bypass intended security controls. By manipulating the SVE Control Register ZCREL2 through an untrapped access, a...

SUSE CVE-2026-64006

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix dst corruption in same register operation For lshift and rshift, the shift operations are performed in a loop over 32-bit words. The loop calculates the shifted value and write it to dst, and then...

SUSE CVE-2026-64038

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Stop work before releasing hwmon device Sashiko reports: In lm90probe, the devm action to cancel the alertwork and reportwork lm90restoreconf is registered in lm90initclient before devmhwmondeviceregisterwithinfo is...

SUSE CVE-2026-64042

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and, although they are requested at startup time, we need to ensure they really were reserved before exporting. Otherwise, it's...