PT-2026-94645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the sun4i crtc init function returns NULL instead of an error pointer when layer initialization fails. Because the caller function sun4i...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

CVE-2026-50607: Exposure of Resource to Wrong Sphere

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access...

CVE-2025-55787: Improper Neutralization of Special Elements used in an SQL Command

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

PT-2026-94866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the teardown of Display Manager DM I2C adapters. Because these adapters may remain visible to userspace while the teardown process is active, a concurrent...

PT-2026-94653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where enabling PREEMPT RT Real-Time preemptibility without selecting HAVE POSIX CPU TIMERS TASK WORK causes CPU timers to expire in...

PT-2026-94733

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.3 Description An issue exists in the md/raid1 component where adding a new rdev to an existing RAID1 array with the serialize policy enabled can lead to a system crash. This occurs because the bind rdev to array...

PT-2026-94836

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad5686 DAC driver within the Industrial I/O IIO subsystem due to a missing NULL check on match data. If a user binds the driver using driver override via sysfs wit...

PT-2026-94894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs during driver detach in the rpmsg glink implementation. The device core holds a device mutex during the driver's remove callback chain. When the rpmsg endpoint is...

PT-2026-94189

Name of the Vulnerable Software and Affected Versions Acer System Monitoring affected versions not specified Description The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES Advanced Encryption Standard is a symmetric bloc...

PT-2026-94852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UIO Userspace I/O subsystem where a stale pointer is maintained during a failed registration path. After the device add function is called, the UIO device becomes...

PT-2026-95082

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

PT-2026-94798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi driver register function requests protocol devices before registering the driver. If the driver register function fails,...

PT-2026-94801

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.6.0-0010.rc1.ctl4 Description A kernel NULL pointer dereference occurs when the amd pstate ut driver is loaded via modprobe on non-AMD platforms, such as Intel platforms. This issue is triggered within the amd pstate ut...

PT-2026-94787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the single-doorbell completion path when the ufshcd compl one cqe function is called with a NULL CQE Completion Queue Entry. If no command is...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: deepin-system-monitor (UTSA-2026-109825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109825 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

PT-2026-94900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/rvt component. The rvt alloc device function deallocates the IB device when the port array allocation fails, but it continues to return the...

PT-2026-94565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to properly compare iterator types during state pruning. Specifically, iterator stack slots can be...

PT-2026-94497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the NFSv4/flexfiles component when interacting with NFSv4.0 data servers. The system incorrectly assumes that the data server client has a session, whi...

PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...