CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

EUVD-2026-59312

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72398 sctp: add INIT verification after cookie unpacking

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...

CVE-2026-72398 sctp: add INIT verification after cookie unpacking

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...

CVE-2026-72398

CVE-2026-72398 concerns the Linux kernel SCTP implementation. When cookie authentication is disabled, an INIT reconstructed during COOKIE-ECHO could be untrusted unless explicitly re-verified; the patch adds sctp_verify_init() checks after cookie unpacking in COOKIE-ECHO paths and tightens sctp_u...

CVE-2026-72144

Summary (CVE-2026-72144) In the Linux kernel, the Dell X Dell-laptop platform had an init error path cleanup issue in dell_init(): if a later LED or backlight registration failed, not all resources were torn down. Specifically, after dell_setup_rfkill(), resources such as the notifier, debugfs di...

CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

EUVD-2026-58902

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

CVE-2026-72109

The CVE-2026-72109 issue affects the Linux kernel net: sparx5, where sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers but leaves ...

CVE-2026-72023 octeontx2-pf: fix SQB pointer leak on init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

EUVD-2026-58981

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

CVE-2026-72023

CVE-2026-72023 affects the Linux kernel’s octeontx2-pf driver. otx2_init_hw_resources() allocates SQ aura/pool resources before later setup steps, and on failure err_free_sq_ptrs frees only SQB pages, leaving per-SQ sqb_ptrs behind. The documented fix uses otx2_free_sq_res() for the SQ unwind pat...

CVE-2026-72023 octeontx2-pf: fix SQB pointer leak on init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

CVE-2026-72413: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

PT-2026-72173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the device property component where the fwnode init function fails to initialize all fields of the fwnode handle structure. When a firmware node is allocated on the...

PT-2026-72328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mlxbf i2c init resource function. When the devm platform get and ioremap resource function returns an error, the system frees the tmp res variable...

PT-2026-72298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sparx5 register notifier blocks function where the switchdev blocking notifier is registered before the allocation of the ordered workqueue. If the workqueue...

PT-2026-72212

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2 Description A memory leak occurs in the octeontx2-pf driver during initialization failure. The otx2 init hw resources function initializes SQ aura and pool resources, but if a subsequent setup step fails, t...