CVE-2026-64121

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

CVE-2026-64110

In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igcfpexmitsmdframe When igcfpeinittxdescriptor fails, no one takes care of an allocated skb, leaking it. 1 Use devkfreeskbany on failure. Tested on an I226 adapter with the following command, while...

EUVD-2026-45795

In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igcfpexmitsmdframe When igcfpeinittxdescriptor fails, no one takes care of an allocated skb, leaking it. 1 Use devkfreeskbany on failure. Tested on an I226 adapter with the following command, while...

CVE-2026-64110

In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igcfpexmitsmdframe When igcfpeinittxdescriptor fails, no one takes care of an allocated skb, leaking it. 1 Use devkfreeskbany on failure. Tested on an I226 adapter with the following command, while...

CVE-2026-64035 igc: set tx buffer type for SMD frames

In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igcfpeinitsmdframe initializes igctxbuffer fields for an SMD skb, but does not set the buffer type:...

CVE-2026-63973 net: mana: Add NULL guards in teardown path to prevent panic on attach failure

In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails partway through, the error cleanup frees and NULLs apc-txqp and apc-rxqs. Multiple teardown paths such as manaremove,...

EUVD-2026-45746

In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails partway through, the error cleanup frees and NULLs apc-txqp and apc-rxqs. Multiple teardown paths such as manaremove,...

CVE-2026-63883

The CVE relates to the Linux kernel serial driver for Qualcomm GENI: a kfifo underflow race when uart_flush_buffer() runs before the DMA completion IRQ. The race sequence can cause stale DMA data to be submitted due to kfifo_len() being reset to 0 while tx_remaining is nonzero, leading to an inco...

EUVD-2026-45488

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp-txringi.txstatus are released. However this is released again when the device is unbinded ath11kpci, and...

CVE-2026-63821 wifi: rtw88: usb: fix memory leaks on USB write failures

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM, the completion callback is never executed. Currently, the driver...

PT-2026-61352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the igc fpe init smd frame function where it fails to set the buffer type when initializing igc tx buffer fields for an SMD skb. Because igc tx buffer entries are...

PT-2026-61176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the airoha qdma cleanup tx queue function where DMA TX descriptors were not being reset. This mirrors a similar issue found in airoha qdma cleanup rx queue...

PT-2026-61427

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the igc fpe init tx descriptor function fails. In this scenario, an allocated skb socket buffer, a data structure used for network packets i...

PT-2026-61137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw88 USB driver, memory leaks occur when the rtw usb write port function fails to submit a USB Request Block URB, such as during device disconnects or memory pressure ENOMEM...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: hns3 – Fixed the double-free issue with the tx spare buffer. In the function hns3setringparam, a temporary copy of the ring structure tmprings is created for rollback purposes. However, the txspare pointer in the original ri...

Malicious code in tx-guard-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce7ebfc771355b732949df26e92e2ec8a80c0de7cda46bcb865687c33d572ff tx-guard-snap advertises itself as a real-time transaction security analysis MetaMask Snap but performs no analysis. Its onTransaction handler...

MAL-2026-6943 Malicious code in tx-guard-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce7ebfc771355b732949df26e92e2ec8a80c0de7cda46bcb865687c33d572ff tx-guard-snap advertises itself as a real-time transaction security analysis MetaMask Snap but performs no analysis. Its onTransaction handler...

SUSE CVE-2026-53107

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs in interrupt context Serialization for the TX path was enforced by calling usbkillurb/usbkillanchoredurbs, to prevent transmission before a previous URB was completed. usbtxblock can be called from...

CVE-2026-53331

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on txlock/ctrl-lock During the SSR/PDR down notification the txlock is taken with the intent to provide synchronization with active DMA transfers. But during this period qcomslimngddown is...

CVE-2026-53331

CVE-2026-53331 is a Linux kernel vulnerability in the slimbus subsystem (qcom-ngd-ctrl) caused by inverted lock acquisition order between the slim_controller lock and tx_lock during SSR/PDR down notification, risking a deadlock and lockdep splats. The advisory notes this was resolved by stopping ...