Linux Distros Unpatched Vulnerability : CVE-2026-72168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent...

Bit-Flip Attacks on Vision-Language-Action Models: Action-Decoding Architecture Shapes the Vulnerability

Quantized Vision-Language-Action VLA models expose a weight-fault surface: Rowhammer-style faults can corrupt deployed INT8 bits. We present the first bit-flip attack on a VLA: a few gradient-selected flips reduce closed-loop success to $0%$, while hundreds of random flips are harmless. Across...

PT-2026-72978

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr fault uevent emit mpi3mr fault uevent emit runs from the fault watchdog and reset paths where host I/O may already be blocked. GFP KERNEL allocations here, both the local kzalloc obj...

PT-2026-72356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmu-flash maps of the mtd module where the use of kmalloc obj and kmalloc objs to allocate memcard structs allows access to uninitialized data. This leads to a...

PT-2026-72819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the nvme setup descriptor pools function. The function indexes the dev-descriptor pools array using a numa node value provided by nvme init hctx...

PT-2026-72583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hardware monitoring hwmon PMBus core where regulator events are batched using atomic or. The delayed worker passes the combined bitmask directly to the regulator...

PT-2026-72643

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.2 Description In the AppArmor module of the Linux kernel, a bug exists where the path name function may pass a potentially uninitialized name pointer to the aa audit file function. This occurs if the path-dentry was...

CVE-2026-74481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset their underlying virtio devices and delete their virtqueues via...

CVE-2026-74398: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure transitions ifp-state from DAD to POSTDAD via addrconfdadend, which drops ifp-lock on return. The lock is re-acquired after...

CVE-2026-74274: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by cxl driver. This means cxl driver always assumes the first p-nrtargets...

CVE-2026-74383: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvmesetupdescriptorpools nvmesetupdescriptorpools indexes dev-descriptorpools using the numanode forwarded from hctx-numanode by its single caller, nvmeinithctxcommon. On a non-NUMA kernel...

CVE-2026-74447: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...

PT-2026-72748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost/vdpa component where the functions vhost vdpa mmap and vhost vdpa fault use vma-vm pgoff as a virtqueue index for get vq notification without validating that...

PT-2026-72834

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the IPv6 address configuration. The addrconf dad failure function transitions the ifp-state from DAD to POSTDAD via addrconf dad end, which releases the...

PT-2026-72675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI subsystem where the kernel fails to properly validate the ROM header and data structure address before access. On x86 64 architectures, a broken ROM space can...

SUSE CVE-2026-68268

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...

SUSE CVE-2026-68276

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocates a 16-dword 64 byte IB but incorrectly fills alignmask + 1 dwords. On GFX rings alignmask is 0xff, so the loop wrote 256 dwords into a...

SUSE CVE-2026-68298

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix SVM leak on resv obj alloc failure in xevmcreate Commit 9e9787414882 "drm/xe/userptr: replace xehmm with gpusvm" made xesvminit unconditional in xevmcreate and extended it to also initialize a "simple" gpusvm state...

MINI-729C-C9W4-QVX4

Bulletin has no description...

SUSE CVE-2026-68182

In the Linux kernel, the following vulnerability has been resolved: comedi: comediparport: deal with premature interrupt Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the interrupt handler parportinterrupt in the "comediparport" driver, but it do...