CVE-2026-72416

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcompat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verdicts: NFACCEPT, NFDROP, and so on. ebtables targets return incompatible verdicts: EBTACCEPT, EBTDROP, ... We cannot allo...

CVE-2026-72416

CVE-2026-72416 affects the Linux kernel netfilter layer (nft_compat) used for ebtables emulation. The issue is that ebtables emulation must reject non-bridge targets, but the nft_compat layer did not enforce this, allowing incompatible verdicts (EBT_* vs NF_*). The commit already enforcing this f...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

EUVD-2026-59313

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414

The CVE-2026-72414 entry concerns the Linux kernel component net: dsa: sja1105. The issue arises when pin_duration, derived from a user-provided period, is converted to SJA1105 clock ticks and passed as the cycle_time to future_base_time(); very small values can become zero, causing a division by...

CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72412

The CVE-2026-72412 entry concerns the Linux kernel s390/mm subsystem and the _PAGE_UNUSED (PAGE_UNUSED) PTE bit. Root cause: KVM could set the bit for unmapped guest pages; later paths could leave it set, so present pages might be treated as unused, risking guest corruption. The fix implemented i...

EUVD-2026-59312

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72412

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72413

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72412 s390/mm: Fix handling of _PAGE_UNUSED pte bit

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72412 s390/mm: Fix handling of _PAGE_UNUSED pte bit

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

EUVD-2026-59311

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72413

The CVE-2026-72413 entry describes a Linux kernel SCTP issue where an err_chunk allocated during INIT handling in sctp_verify_init() could leak in multiple code paths (INIT handling in sctp_sf_do_5_1B_init and sctp_sf_do_unexpected_init, including the success path). The workaround/mitigation is t...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

EUVD-2026-59310

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...