Linux Distros Unpatched Vulnerability : CVE-2026-64453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: misc: usbio: fix disconnect UAF in client teardown usbiodisconnect walks usbio-clilist in reverse and uninitializes each auxiliary device...

Linux Distros Unpatched Vulnerability : CVE-2026-64436

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the...

Linux Distros Unpatched Vulnerability : CVE-2026-64359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject CLEANSEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfstransactionbegin where multiple tasks performing chmod ...

Linux Distros Unpatched Vulnerability : CVE-2026-64391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS...

Linux Distros Unpatched Vulnerability : CVE-2026-64252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other...

Linux Distros Unpatched Vulnerability : CVE-2026-64456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes...

Linux Distros Unpatched Vulnerability : CVE-2026-64438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues PF- side response work that stores a raw pointer to per-VF stat...

PT-2026-64645

In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is clearly detected by KASAN. BUG: KASAN: slab-use-after-free in raw spin lock irqsave+0x3b/0x80 Read of size 1 at addr ... by task...

PT-2026-64706

In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd compr task new allocates the driver task before validating the returned DMA buffers and reserving file descriptors. When either of those later steps fails, the core frees its tas...

PT-2026-64678

In the Linux kernel, the following vulnerability has been resolved: virtio pci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtio balloon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...

PT-2026-64677

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy data random recv done stores the device-reported used.len directly into vi-data avail. copy data then indexes vi-data using vi-data idx advanced by previous copy data calls an...

PT-2026-64483

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse req on io-uring cancel task work When io uring delivers task work with tw.cancel set PF EXITING, PF KTHREAD fallback, or percpu ref is dying on the ring context, fuse uring send in task takes the cancel branc...

PT-2026-64673

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpan nhc do uncompression looks up an NHC descriptor while holding lowpan nhc lock. If the descriptor has no uncompress callback, the error path drops the lock before printing...

PT-2026-64595

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT PUSH IPI be default off for non PREEMPT RT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are...

PT-2026-64652

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling post write mst fixup for invalid index block ntfs icx ib sync write calls post write mst fixup when ntfs ib write returns an error, intending to restore the buffer after a failed write. However, ntfs ib write...

PT-2026-64580

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN SEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfs transaction begin where multiple tasks performing chmod on a nilfs2 mount blocked for over 143 seconds waiting to acquire ...

PT-2026-64721

In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "lpc32xx adc probe in drivers/iio/adc/lpc32xx adc.c registers its interrupt handler with devm request irq before it initializes...

PT-2026-64480

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse req on SQE commit only findable after memcpy Bad userspace might try to trick us and send commit SQEs request unique / commit-id of requests that are not even send to fuse-server io uring cmd done not call...

PT-2026-64655

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref l2cap chan timeout runs asynchronously and accesses chan-conn. If the connection is torn down while the timer is running or pending, chan-conn can be freed, leading...

PT-2026-64648

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORT ID DJ SHORT related user initiated OOB write" added validation for the DJ short output report, but the error...