Linux Distros Unpatched Vulnerability : CVE-2026-74443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without...

Linux Distros Unpatched Vulnerability : CVE-2026-74495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb...

Linux Distros Unpatched Vulnerability : CVE-2026-74491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local...

PT-2026-72662

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor For architectures like Microblaze or arm64 where this IP is used, DMA DIRECT REMAP is set which means that dma alloc coherent might remap and hence vmalloc some...

PT-2026-72947

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

PT-2026-72721

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif rxq cleanup unlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

PT-2026-73026

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup in idxd cdev open The failed dev add and failed dev name paths drop the file-device reference while wq-wq lock is still held. If put devicefdev drops the last reference, idxd file d...

PT-2026-72764

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content unt...

PT-2026-72337

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer length to be a multiple of the max burst size configured for the channel. When a client requests a transfer where the length...

PT-2026-72248

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx cldma late init creates md ctrl-gpd dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized...

PT-2026-72851

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

PT-2026-72664

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma release channel, check chan-device-privatecnt after call dma chan put. However, dma chan put call dma device put which could release the last reference of the device if the DMA provid...

PT-2026-72277

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys disk-in reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 S...

PT-2026-72716

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sg cleanup path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

PT-2026-72336

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE INT MASK and ABORT INT MASK The DONE INT MASK and ABORT INT MASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this...

PT-2026-72997

In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA map failure In rtase start xmit, when the head buffer DMA mapping fails after rtase xmit frags has mapped all fragments, the error path clears the fragment descriptors with rtase tx...

Linux Distros Unpatched Vulnerability : CVE-2026-74545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtase: fix double free of multi-frag skb on DMA map failure In rtasestartxmit, when the head buffer DMA mapping fails after rtasexmitfrags has mapped all...

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference to it. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-68212

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...