PT-2026-72914

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On certain i.MX platforms, a system hang can occur during the suspend and resume process. This happens because some I2C client drivers use a periodic workqueue that continues to trigger...

CVE-2026-68464: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt When using WIFI out-of-band wakeup, an "irq xxx: nobody cared" warning occurs. This happens because the usdhc interrupt is not disabled during system...

PT-2026-72291

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm early create function where the kernel incorrectly attempts to free a table using the dm table destroy function if dm resume fails. This occurs because the tabl...

PT-2026-72637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the kfd criu resume svm function. The cleanup process iterates through the svms-criu svm metadata list and frees each struct criu svm metadata without...

Linux Distros Unpatched Vulnerability : CVE-2026-74462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger...

PT-2026-72534

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLAND WMI CONTROL and an event device BITLAND WMI EVENT. During the probe phase,...

PT-2026-72175

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sdhci-esdhc-imx driver where the use of pm runtime get sync during suspend requires complex error handling. If the process fails, the device remains unclocked, and...

PT-2026-72331

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the platform/x86 ISST component where the SST-PP control offset is only restored to power domain 0 after a resume operation, despite control values being read and stor...

PT-2026-72597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On Marvell MPIC platforms Armada 370/XP/38x, the mvneta driver uses a per-CPU interrupt request IRQ disable/enable scheme for NAPI New API, a mechanism for reducing interrupt overhead. T...

PT-2026-72789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the system fails to consistently execute the resume all function after suspend all. This prevents the restoration of functional queues...

CVE-2026-72346: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT. During the probe phase, the...

PT-2026-72742

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the qat vf resume write function. The function verifies the f pos variable before acquiring the migf-lock, but it performs the copy operation into the...

CVE-2026-65981

A flaw was found in Coturn, an open-source implementation of TURN and STUN servers. An authenticated attacker who obtains a victim's MOBILITY-TICKET can exploit this vulnerability during a session resume. This allows the attacker to take over the victim's TURN Traversal Using Relays around NAT...

CVE-2026-68364

A flaw was found in the drm/amd/display component of the Linux kernel. A deadlock can occur during system suspend and resume operations when video is actively playing. This issue arises due to conflicting locking mechanisms within the display driver, where a function attempting to disable a...

CVE-2026-47704 TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...

CVE-2026-47704 TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...

CVE-2026-47704 TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...

CVE-2026-47704: Authorization Bypass Through User-Controlled Key

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...

CVE-2026-68364

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dclock deadlock during suspend Why System hang observed during suspend/resume while video is playing. amdgpudmismdisable is called under dclock and waits for ISM delayed work via disabledelayedworksync. T...

CVE-2026-68364

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dclock deadlock during suspend Why System hang observed during suspend/resume while video is playing. amdgpudmismdisable is called under dclock and waits for ISM delayed work via disabledelayedworksync. T...