SUSE CVE-2026-72072

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadatadst on RX SC delete When an offloaded MACsec RX SC is deleted, macsecdelrxscctx freed the per-SC metadatadst with metadatadstfree, which kfrees the object unconditionally and ignor...

SUSE CVE-2026-72254

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base chain dereferences nftinpkt, NULL on the transmit path, causing a NULL pointer dereference at eval. nftfibvalidate masks...

SUSE CVE-2026-72307

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspvrslpmtreereplace When mlxswspvrslpmtreereplace fails after replacing some VRs, the error rollback loop does not correctly revert the preceding replacements. The loop decrements the index but...

SUSE CVE-2026-72308

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspportlagjoin When mlxswspportlagindexget fails, mlxswspportlagjoin returns an error without releasing the lag reference obtained by the earlier mlxswsplagget. All other error paths in the functio...

PT-2026-82994

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk eth soc: pass eth to mtk handle irq rx in poll controller mtk handle irq rx expects a struct mtk eth matching the request irq cookie, but mtk poll controller incorrectly passed the net device . Calling ndo poll...

PT-2026-82977

In the Linux kernel, the following vulnerability has been resolved: driver core: use READ ONCE for dev-driver in dev has sync state dev has sync state reads dev-driver twice without holding device lock -- once for the NULL check and once to dereference -sync state. Some callers only hold device...

PT-2026-83018

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu create chunk In pcpu create chunk, nr pages is the total contiguous backing allocation, i.e., nr units pcpu unit pages, but pcpu chunk populated uses it to set...

PT-2026-82918

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpu amdkfd gpuvm free memory of gpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU...

PT-2026-83024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmclock miscdev mmap function within the drivers/ptp/ptp vmclock.c file. This flaw allows read-only mappings to become writable, which may impact the...

PT-2026-82973

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs external attr find When resolving an attribute lookup with a non-zero @lowest vcn, ntfs external attr find peeks at the next $ATTRIBUTE LIST entry to decide whether to keep...

Linux Distros Unpatched Vulnerability : CVE-2026-80718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits...

Linux Distros Unpatched Vulnerability : CVE-2026-80698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease,...

Linux Distros Unpatched Vulnerability : CVE-2026-80616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and...

Linux Distros Unpatched Vulnerability : CVE-2026-80724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but...

The vulnerability in the `drivers/net/ipa/reg/gsi_reg-v5.0.c` module of the Linux kernel’s network device drivers allows a attacker to cause a service failure.

The vulnerability in the drivers/net/ipa/reg/gsireg-v5.0.c module of the Linux kernel’s network device drivers is related to an incorrect check of a specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the xdp_umem_reg() function in the net/xdp/xdp_umem.c module, which implements networking functions for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xdpumemreg function in the net/xdp/xdpumem.c module, which implements networking functions for the Linux kernel, is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ceph_monmap_decode() function in the net/ceph/mon_client.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cephmonmapdecode function in the net/ceph/monclient.c module, which implements networking functions for the Linux operating system’s kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to caus...

The vulnerability of the `bond_rcv_validate()` function in the `drivers/net/bonding/bond_main.c` file of the Linux kernel-based network device driver allows a hacker to trigger a service failure.

The vulnerability of the bondrcvvalidate function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the net/netfilter/nft_set_pipapo_avx2.c module of the Linux kernel’s netfilter component, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/netfilter/nftsetpipapoavx2.c module of the Linux kernel’s netfilter component is related to a violation of expected behavior. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the shmem_sg_alloc_table() function in the drivers/gpu/drm/i915/gem/i915_gem_shmem.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the shmemsgalloctable function in the drivers/gpu/drm/i915/gem/i915gemshmem.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an...