CVE-2026-43297 media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERRPTR dereference in rgabufinit rgagetframe can return ERRPTR-EINVAL when buffer type is unsupported or invalid. rgabufinit does not check the return value and unconditionally dereferences the...

PT-2026-38939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel within the rockchip RGA component. The rga get frame function may return an ERR PTR-EINVAL when a buffer type is invalid or unsupported. Because the rga...

PT-2026-39121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the rockchip-sfc SPI driver. The driver utilizes devm spi register controller for registration, which automatically handles controller unregistration during...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

RK35xx Kernel Patch: CVE-2026-31431 "Copy Fail" RK35xx Copy...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013585 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchippinctrlparsegroups offindnodebyphandle returns a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011030 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchipclkregisterpll If clkregister fails, @pll-ratetable may...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011089 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usage counter unbalance in poweron pmruntimegetsync will increment pm...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006907 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchipclkregisterpll If clkregister fails, @pll-ratetable may...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007018 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010819 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchippinctrlparsegroups offindnodebyphandle returns a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013196 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchippinctrlparsegroups offindnodebyphandle returns a...

PT-2026-33778

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description The Cassandra export module glances/exports/glances cassandra/ init .py interpolates configuration values directly into CQL statements without validation. A user with write access to glances.conf can...

PT-2026-33776

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description The web server exposes a REST API endpoint '/api/4/' that is accessible without authentication. Due to a permissive Cross-Origin Resource Sharing CORS policy, specifically the...

PT-2026-33777

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description A Server-Side Request Forgery SSRF issue exists in the Glances IP plugin due to improper validation of the public api configuration parameter. The value of public api is passed directly to the urlope...

SUSE-SU-2026:21123-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-38542: RDMA/manaib: boundary check before installing cq callbacks bsc1226591. - CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006783 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main...

ROS-20260408-73-0014

A vulnerability in the arch/arm/mach-rockchip component of the Linux operating system kernel is related to a race condition in the signal handler. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50144)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50144 advisory. - mm/pagealloc: prevent pcp corruption with SMP=n Vlastimil Babka Orabug: 38914772 CVE-2026-23025 - phy: rockchip: inno-usb2: Fix a double free b...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005694 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usage counter unbalance in poweron pmruntimegetsync will increment pm...

SUSE CVE-2025-71200

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode When operating in HS200 or HS400 timing modes, reducing the clock frequency below 52MHz will lead to link broken as the Rockchip DWC MSHC controller...