Linux Distros Unpatched Vulnerability : CVE-2026-74596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems...

Linux Distros Unpatched Vulnerability : CVE-2026-74646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: fastrpc: take fl-lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal, waitforcompletioninterruptible returns -ERESTARTS...

PT-2026-79663

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A robust futex unlock stores 0 over the whole futex value - wiping FUTEX WAITERS - and wakes a single waiter. That wakeup is a one-shot notification: the protocol relies on its...

PT-2026-79726

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna insert pages Two error paths in amdxdna insert pages called vma-vm ops-closevma before returning an error code to the caller. This is incorrect: amdxdna gem obj mmap registers an...

PT-2026-79681

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt k ioctl enforce, allowing a process to change meta mode on a non-controlling...

PT-2026-79622

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibs dev alloc dibs-lock is initialised by dibs dev add, but a dibs device can already take interrupts before that call: ism probe runs ism dev init, and hence request irq, before it calls dibs dev...

PT-2026-79652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the fastrpc req munmap impl function. The issue occurs because buffers are removed from the list only after they are unmapped from the DSP. When multiple threa...

PT-2026-79626

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: fix sk buff leak when the header checks reject a packet tcf ct handle fragments runs its header sanity checks before handing anything to the defragmentation engine: if family == NFPROTO IPV4 err = tcf ct ipv4 i...

PT-2026-79627

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aq ring rx deinit only walks sw head, sw tail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its D...

PT-2026-79594

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk redir use-after-free in send verdict sk psock msg verdict takes a socket reference for psock-sk redir. tcp bpf send verdict copies that pointer while holding the source socket lock, but does not take a...

PT-2026-79649

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damon pa migrate and damos va migrate isolate folios into a local list and then call damon migrate pages. When target nid is invalid including the scheme default NUMA NO...

PT-2026-79662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fib nlmsg size function where nexthop space is incorrectly estimated by assuming every gateway is encoded as an IPv4 RTA GATEWAY attribute. Because IPv4 routes can...

PT-2026-79653

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw cfg80211 monitor if xmit entry removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains. The data...

PT-2026-79607

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb allocate cpu buffer In rb allocate cpu buffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE SIZE if when freed: free...

PT-2026-79674

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip vs in icmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmp send. However, IPCBskb-opt still describes the outer IPv4...

PT-2026-79641

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between update event fields and, event define fields The following sequence may leads race between event define fields and update event fields: CPU0 loads module A CPU1 loads module B...

PT-2026-79673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tpacket snd function where dev-hard header len is read independently during skb allocation and header construction within tpacket fill skb. Concurrent netdevice...

PT-2026-79608

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlink info version fixed put treats it as a C string and may read beyond th...

PT-2026-79648

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal target values Patch series "mm/damon: avoid division by zero from damos quota score". DAMON SAMPLE MTIER and DAMON LRU SORT allow the user to trigger division by zero in damos...

PT-2026-79694

In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vcc setsockopt vcc setsockopt contained an ineffective optlen check: if SO LEVEL MATCHoptname, level && optlen != SO SIZEoptname return -EINVAL; If SO LEVEL MATCHoptname, level evaluated to...