PT-2026-79707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component where the vhost scsi set features function allows changes to feature bits after an endpoint is active. Specifically, if the VIRTIO SCSI F T10 ...

PT-2026-79737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs on Southern Islands dGPUs when turning off the display over HDMI. This happens because some older DCE timing generators do not implement the is tg enabl...

CVE-2026-74732: Undefined Security Weakness

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2026-79733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the XFS file system where the xfs buf free function fails to properly handle a NULL b addr value. When the xfs buf alloc backing mem function fails, xfs buf free is...

PT-2026-79711

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr dev fails during auxiliary device setup, the error path calls auxiliary device uninit, which eventually invokes bnge aux dev release. The release...

Linux Distros Unpatched Vulnerability : CVE-2026-74706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceunini...

PT-2026-79592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SCTP implementation. The addip last asconf variable caches outbound ASCONF chunks. When sctp asconf queue teardown is called during peer restart...

PT-2026-79671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where packet set ring updates the RX ring state under sk receive queue.lock but publishes the tpacket receive mode through po-prot hook.func after releasing that lock. Th...

PT-2026-79638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the tracing component during module event cache removal. When a module-only event filter is cached while the module has not been loaded, the event...

CVE-2026-74706: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceuninit, which eventually invokes bngeauxdevrelease. The release callback...

Linux Distros Unpatched Vulnerability : CVE-2026-74610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does no...

CVE-2026-74610: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

Linux Distros Unpatched Vulnerability : CVE-2026-74726

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: alb: re-check primaryispromisc under RTNL in bondalbmonitor bondalbmonitor reads primaryispromisc under RCU, then drops RCU and takes RTNL via...

Linux Distros Unpatched Vulnerability : CVE-2026-74684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp The commit 4f61f133f354 net: tap: NULL pointer derefence in devparseheaderprotocol when...

CVE-2026-74610: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

Linux Distros Unpatched Vulnerability : CVE-2026-74585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Bound the DROM dual link port number before indexing sw-ports tbdromparseentryport validates the device-supplied header-index against...

PT-2026-79659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial: 8250 dma component where the serial8250 release dma function terminates RX DMA and releases the channel but fails to clear the rx running state. If a port ...

PT-2026-79590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Thunderbolt subsystem where the tb drom parse entry port function fails to validate the dual link port nr field read from the Device ROM DROM. While the header-ind...

Linux Distros Unpatched Vulnerability : CVE-2026-74717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: fwtracer, return NULL on create error Tracer creation can fail by returning either NULL or ERRPTR. The return value is stored without a check on the...

PT-2026-79731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bond alb monitor function. The function reads the primary is promisc variable under RCU Read-Copy-Update, then releases RCU and acquires RTNL Routing Netli...