Linux Distros Unpatched Vulnerability : CVE-2026-72201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an...

Linux Distros Unpatched Vulnerability : CVE-2026-72334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: fix malformed ISOEND/CONT handling Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT, ISOEND packets. We currently reject...

Linux Distros Unpatched Vulnerability : CVE-2026-72057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: preserve tcskbcb across defragmentation tcfcthandlefragments calls nfcthandlefragments without saving and restoring skb-cb. The defrag helper...

Linux Distros Unpatched Vulnerability : CVE-2026-74497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result...

Linux Distros Unpatched Vulnerability : CVE-2026-74488

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex11ndispatchamsdupkt splits an A-MSDU with ieee80211amsduto8023s and walks the...

Linux Distros Unpatched Vulnerability : CVE-2026-74480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelp...

Linux Distros Unpatched Vulnerability : CVE-2026-74550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tre...

Linux Distros Unpatched Vulnerability : CVE-2026-72321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: igmp: Fix potential memory leaks in igmpmodtimer and igmpstoptimer When a timer is deleted and not re-armed in igmpmodtimer, or stopped in igmpstoptimer,...

Linux Distros Unpatched Vulnerability : CVE-2026-74558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or...

PT-2026-72897

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: reject DX BIND QUERY without a DX context vmw cmd dx bind query unconditionally dereferences sw context-dx ctx node-ctx. Userspace can trigger a NULL pointer dereference from any render-node fd by submitting an execbu...

Linux Distros Unpatched Vulnerability : CVE-2026-72260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardwar...

PT-2026-72884

Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted report into memory without bounding how much it will accept, so a single request can exhaust the heap and deny service...

PT-2026-72580

In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6 walk continue on multi-batch dump inet6 dump fib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6 new table can insert a new...

PT-2026-72999

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'auto update interval' to 0 via sysfs, the background kthread executes schedule timeout interruptible0, which returns immediately. If 'num...

PT-2026-72998

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN DATA VALID check and the FAN PERIOD TO RPM conversion, it will result in a divide-by-zero crash due to a race with a...

Linux Distros Unpatched Vulnerability : CVE-2026-74531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: hold conn reference in abortconnsync There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid...

Linux Distros Unpatched Vulnerability : CVE-2026-72497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Addi...

Linux Distros Unpatched Vulnerability : CVE-2026-72242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and...

Linux Distros Unpatched Vulnerability : CVE-2026-72086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path scsibackdeviceaction obtains a command tag in scsibackgetpendreq and submits a...

Linux Distros Unpatched Vulnerability : CVE-2026-74302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Fix UAF in hciunregisterdev hciunregisterdev does not disable cmdtimer and ncmdtimer before the hcidev structure is freed. If a timeout fire...