PT-2026-137100

Name of the Vulnerable Software and Affected Versions ESP-IDF versions 5.5.5 through 5.5.5 ESP-IDF version 6.0.4 ESP-IDF version 6.1.1 Description In the ESP-TEE trap entry within esp tee vectors plic.S and esp tee vectors clic.S, the system saves a caller-controlled register frame using a stack...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.2 contain a buffer error vulnerability. This vulnerability arises because the rdpreadbitmapcachev2capabilityset function in the proxy only rejects values of numCellCaches greater than 5. However, the bitmap cache v2 cell array is subsequently accessed using fixed...

CVE-2026-89962

A flaw was found in the Linux kernel's powerpc/kexecfile component. The mergememoryranges function incorrectly handles overlapping memory ranges, leading to critical memory truncation. This issue can cause valid memory areas to be lost from kexec exclude lists, potentially allowing the crash kern...

ASUS motherboard buffer error vulnerability

The ASUS motherboard has a buffer error vulnerability caused by an untrusted pointer dereference. Users with kernel-level privileges can use I/O commands to supply arbitrary memory addresses, potentially leading to system information tampering or system crashes...

RT-Labs AB SOEM buffer error vulnerability

A security vulnerability exists in RT-Labs AB SOEM versions prior to 2.0.1. This vulnerability arises because the length and offset values of device messages are not validated against the buffer size during frame processing. As a result, the master station may read data outside the allocated...

Open5GS buffer error vulnerability

Open5GS versions 1.3.0 through 2.8.0 contain a buffer error vulnerability. This vulnerability arises because parsemultipart performs heap-based out-of-bounds writes when a null multipart boundary is encountered. Unauthenticated attackers can exploit this by sending specially crafted...

CVE-2026-98863

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. When running nested virtual machines, the hypervisor fails to properly re-queue a memory page request if retrieving state pages for a nested guest fails during execution. A local user controlling virtual machine...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.2. It arises when the dm-integrity device sets the SBFLAGDIRTYBITMAP flag and activates it in ‘R’ mode; as a result, the dmintegrityresume function attempts to read logs containing bitmaps, potentially leading to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises when the hot work queue remains initialized despite being disabled via the amdgpu.dpm=0 module parameter; this can lead to system anomalies or...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: fix mismatch between power and frequency During DPU runtime suspend, calling devpmoppsetratedev, 0 drops the MMCX rail to MINSVS while the core clock frequency remains at its original highest rate. When runtime resum...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer overflow vulnerability. This vulnerability stems from an out-of-bounds write in the prloadimage function of converter/other/rast.c in rasttopnm. An attacker could provide a rasterfile with extremely small sizes and long run lengths, writing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the use of iouring in the SQPOLL scenario, where the taskwork is reclaimed and reused after release, potentially leading to memory corruption or system crashes...

Beau Gunderson ip-address resource management error vulnerability

Beau Gunderson’s IP-address version prior to 10.7.4 contains a resource management error vulnerability. This vulnerability arises from functions that accept inputs containing a large number of '%' characters and invoke the Address6 constructor function. This leads to a quadratic complexity, causi...

libLAS buffer error vulnerability

LibLAS versions 1.8.1 and earlier have a buffer error vulnerability. This vulnerability arises from the point record reader truncating the schema byte size to 16 bits when calculating the point buffer size. An attacker can create a .las file with a schema exceeding 65,535 bytes, resulting in...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.6.44 to 6.6.158, as well as 6.10.3 to 6.11, and 6.11 itself, have security vulnerabilities. These vulnerabilities stem from an additional length byte sb7 in the trust REQUEST SENSE response generated by atascsisetpassthrusensefields. Without proper boundary...

HPE NonStop SOAP input validation error vulnerability

HPE NonStop SOAP 4.0 T0865L01^ACN and earlier versions contain an input validation error vulnerability caused by memory corruption, which may lead to system crashes...

CVE-2026-98298

A flaw was found in the Linux kernel's MMP Peripheral Direct Memory Access PDMA driver. When preparing multi-entry scatter-gather lists for Direct Memory Access DMA transfers, the driver incorrectly reads the buffer length from the initial list entry rather than the active entry being processed. ...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the ALSA virtio driver failing to reset devices prior to deleting virtqueues; this may result in access to vring memory that has been freed, potentially leading to memory corruption or system crashes...

kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

A flaw was found in the Linux kernel's crypto QAT QuickAssist Technology module. A race condition exists during the teardown of Virtual Function to Physical Function VF2PF work in the adfdisablesriov function. This allows a concurrently scheduled or already queued worker to attempt to access memo...

PT-2026-98022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI iproc component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent rescan...