PT-2026-97795

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The prefetch library contains an out-of-bounds issue that can lead to a system crash when the software parses specifically crafted malformed prefetch files. Recommendations At the moment...

PT-2026-98019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI mediatek component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent...

PT-2026-98120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pinctrl mediatek paris component where the functions pinctrl gpio direction input and pinctrl gpio direction output acquire the pinctrl mutex. This requirement...

CVE-2026-93819

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

CVE-2026-93819: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

CVE-2026-93818: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...

CVE-2026-97498: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evicted for user queues to work properly. During eviction if these buffers...

CVE-2026-97411: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...

CVE-2026-93816: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots. A corrupted imag...

CVE-2026-97181: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-89325: Uncontrolled Search Path Element

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-97498

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evicted for user queues to work properly. During eviction if these buffers...

ROS-20260924-73-0070

The vulnerability of the tc358743probe function in the drivers/media/i2c/tc358743.c file of the Linux kernel’s multimedia device driver is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-98014

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SPI core where a controller operating in target mode does not abort active transfers during system suspend. This failure to terminate ongoing transfers can leave t...

CVE-2026-93814

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

ROS-20260924-73-0022

The vulnerability of the bpfbasertt function in the samples/bpf/tcpbaserttkern.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system...

PT-2026-98043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-fc module where a controller in the CONNECTING state may experience an admin request timeout, triggering ctrl-ioerr work to abort inflight requests. This...

ROS-20260924-73-0090

The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c driver, which is part of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability coul...

ROS-20260924-73-0027

The vulnerability of the mesonsmprobe function in the drivers/firmware/meson/mesonsm.c file of the Linux kernel’s firmware module is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

ROS-20260924-73-0041

The vulnerability of the niclear function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...