UBUNTU-CVE-2026-64463

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

CVE-2026-64510 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...

CVE-2026-64473

Summary (CVE-2026-64473) : In the Linux kernel, VFIO debugfs teardown was reordered to fix a use-after-free-like state where per-device debugfs entries could remain visible with stale inode data after unregister. The root cause was that vfio_unregister_group_dev() called vfio_device_del() before ...

CVE-2026-64473 vfio: Remove device debugfs before releasing devres

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...

CVE-2026-64473 vfio: Remove device debugfs before releasing devres

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...

CVE-2026-64463

CVE-2026-64463 affects the Linux kernel USB Type-C TCPCI driver for rt1711h. The issue arises when rt1711h_probe() registers the TCPCI port before requesting the interrupt and enabling alert interrupts; if subsequent steps fail, the port wasn’t unregistered, and removal relied on the remove callb...

CVE-2026-64463

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

EUVD-2026-48807

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

CVE-2026-64463 usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

CVE-2026-64452

CVE-2026-64452 (Linux kernel 6LoWPAN) involves a race condition in 6LoWPAN’s Next Header Compression (NHC) handling that can cause a use-after-free in lowpan_nhc_do_uncompression when an NHC descriptor is freed while another path accesses nhc->name in an error path. The issue arises from holdi...

EUVD-2026-48796

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no uncompress callback, the error path drops the lock before printing...

CVE-2026-64452 6lowpan: fix NHC entry use-after-free on error path

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no uncompress callback, the error path drops the lock before printing...

CVE-2026-64452 6lowpan: fix NHC entry use-after-free on error path

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no uncompress callback, the error path drops the lock before printing...

CVE-2026-64401

CVE-2026-64401 affects the Linux kernel SMB/CIFS client. The bug occurs in cifs_swn_notify() which, under cifs_swnreg_idr_mutex, uses a cached tcon pointer that is not a stable reference, risking use-after-free when multiple tcons exist for a net/share. A same-share mount can keep the registratio...

EUVD-2026-48945

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

CVE-2026-64305

CVE-2026-64305 is a race condition in the Linux kernel's Intel QAT crypto driver (crypto/qat). The service_table list is protected by service_lock when entries are added or removed, but several functions (adf_dev_init, adf_dev_start, adf_dev_stop, adf_dev_shutdown, and notifier callbacks) iterate...

SUSE CVE-2026-64244

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem-altmap after successful device registration If addmemoryblock fails at xastore under memory pressure for example, deviceunregister is called, which eventually triggers memoryblockrelease with mem-altm...

PT-2026-64694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VFIO component where vfio unregister group dev calls vfio device del before vfio device debugfs exit. Because device del releases devres device-managed resources,...

Linux Distros Unpatched Vulnerability : CVE-2026-64463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts...

PT-2026-64684

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rt1711h probe function where the TCPCI port is registered before the interrupt is requested and alert interrupts are enabled. If the interrupt request or the...