CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

EUVD-2026-64377

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

PT-2026-79695

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism dev exit A ism interrupt handler can be active in parallel with ism dev exit, accessing freed data structures. No new interrupts will be generated after unregister ieq. Drain ongoing...

CVE-2026-45742

Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go starts one errgroup.Go goroutine for each multipart downloadFrom entry and allows those goroutines to concurrently write to the shared ctx.files,...

CVE-2026-45742

Gotenberg (a Docker-powered stateless PDF conversion API) versions 8.10.0 through 8.32.x contain a race condition in pkg/modules/api/context.go. The newContext function spawns one goroutine per multipart downloadFrom entry, and those goroutines concurrently write to shared maps (ctx.files, ctx.di...

CVE-2026-72117

A flaw was found in the Linux kernel's CAN Controller Area Network Broadcast Manager BCM module. A data race condition exists in the bcmrxhandler function where the rxstamp and rxifindex values are written without proper locking. This can lead to a "torn store" of the 64-bit rxstamp on 32-bit...

CVE-2026-72420

A flaw was found in the Linux kernel's md/raid5 module. A data-race condition exists between the breakstripebatchlist and raid5makerequest functions. This race can lead to a scenario where a process waits indefinitely, potentially causing a Denial of Service DoS for the system...

CVE-2026-72118

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. A data race condition, occurring when multiple central processing units CPUs simultaneously process CAN frames, can lead to incorrect statistics being reported. This could result in a bogus or negativ...

CVE-2026-72420

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

UBUNTU-CVE-2026-72420

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72118

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

CVE-2026-72117

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rxstamp/rxifindex in bcmrxhandler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcmrxhandler can run concurrentl...

UBUNTU-CVE-2026-72117

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rxstamp/rxifindex in bcmrxhandler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcmrxhandler can run concurrentl...

UBUNTU-CVE-2026-72118

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

CVE-2026-74262

In the Linux kernel, CVE-2026-74262 affects the kernel networking path used by KCM. kcm_attach() replaces a live lower TCP socket’s sk_data_ready and sk_write_space callbacks with KCM handlers, and kcm_unattach() restores them later. These updates were plain stores and could be observed by other ...

CVE-2026-72420 md/raid5: avoid R5_Overlap races while breaking stripe batches

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72420 md/raid5: avoid R5_Overlap races while breaking stripe batches

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

EUVD-2026-59319

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72420

CVE-2026-72420 : In the Linux kernel, a race was reported between md/raid5 break_stripe_batch_list and raid5_make_request, involving sh->dev[i].flags (non-atomic write vs. atomic bit op) that could trigger a data race on R5_Overlap. The public descriptions provide a scenario where CPU1 clears ...

CVE-2026-72355

The CVE-2026-72355 entry concerns the Linux kernel netfs subsystem. A race/ barriering issue was fixed in the subrequest list during retry, where a newly added subrequest could be observed, potentially allowing an elevated-risk scenario. The vulnerability is tied to the netfs subrequest traversal...