EUVD-2026-59426

In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sgcleanup error path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

EUVD-2026-59427

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sgcleanup path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

CVE-2026-74265

The CVE describes a Linux kernel fix in net: mana where gdma queue id is now initialized to INVALID_QUEUE_ID immediately after allocation. Previously, mana_gd_create_mana_wq_cq() left queue->id as 0 until mana_create_wq_obj() set the firmware-returned id; if creation failed before that, cleanu...

EUVD-2026-59409

In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITEONCE when changing lower socket callbacks kcmattach replaces a live lower TCP socket's skdataready and skwritespace callbacks with KCM handlers, and kcmunattach restores them later. Those callback-pointer updates ar...

CVE-2026-74259 cifs: remove all cifs files before kill super

In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super Cifs files may be put into fileinfoputwq during umounting cifs. After umount done, cifsFileInfoputfinal is called, which cause following BUG: BUG: kernel NULL pointer dereference,...

CVE-2026-72488 soundwire: fix bug in sdw_add_element_group_count found by syzkaller

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdwaddelementgroupcount found by syzkaller The original implementation caused an out-of-bounds memory access in the sdwaddelementgroupcount for-loop when i == num. for i = 0; i ratesi && lane == group-lanesi...

EUVD-2026-59373

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor For architectures like Microblaze or arm64 where this IP is used, DMADIRECTREMAP is set which means that dmaalloccoherent might remap and hence vmalloc some memory...

CVE-2026-72474 dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor For architectures like Microblaze or arm64 where this IP is used, DMADIRECTREMAP is set which means that dmaalloccoherent might remap and hence vmalloc some memory...

CVE-2026-72474

Summary (concrete details available) : CVE-2026-72474 concerns the Linux kernel’s dmaengine, specifically the dma-axi-dmac path. The issue arises on architectures such as Microblaze or arm64 where DMA_DIRECT_REMAP can cause dma_alloc_coherent() to remap memory (including vmalloc()). In the affect...

CVE-2026-72374

The CVE affects the Linux kernel AFS client: a bug in callback message parsing caused -EAGAIN to be swallowed (instead of being propagated by afs_extract_data), potentially impacting availability. The fix corrects the callback service message parsers to pass through -EAGAIN. CVSS 3.1 base score 7...

EUVD-2026-59272

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified volume is unknown...

CVE-2026-72372

CVE-2026-72372 affects the Linux kernel in the afs subsystem, fixing a race when modifying net->cells_dyn_ino. The patch adds exclusive locking via net->cells_lock and changes the removal of a cell from net->cells_dyn_ino to afs_destroy_cell_work() instead of afs_cell_destroy(), because ...

CVE-2026-72372 afs: Fix lack of locking around modifications of net->cells_dyn_ino

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

EUVD-2026-59262

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio needs to be redirtied and unlocked before the terminal writebackiter...

CVE-2026-72364

The CVE-2026-72364 pertains to the Linux kernel netfs writeback path. Affected component: writeback_iter() in netfs. Root cause: error handling in the writeback loop did not properly unwind state after an error. As documented, when an error occurs, writeback_iter() must be called again with the e...

CVE-2026-72284 KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

EUVD-2026-59183

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

CVE-2026-72284 KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

CVE-2026-72284

CVE-2026-72284 affects the Linux kernel KVM on x86, where a logic error in arch/x86/kvm/lapic.c (line ~3338) caused PV EOIs to be ignored if the vCPU later disables PV EOIs, potentially triggering a kernel oops (invalid opcode) during KVM vCPU ioctls. The vulnerability is locally exploitable as p...

EUVD-2026-58927

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...