Linux Distros Unpatched Vulnerability : CVE-2026-74307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as t...

PT-2026-72499

In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe vm madvise ioctl allocates madvise range.vmas in get vmas. After get vmas succeeds with at least one VMA, error paths must go through free vmas so the array is released before...

PT-2026-72918

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/zcrypt component where a user-controlled domain value is extracted from a CCA or EP11 ioctl struct during the preparation of a CPRB. Under specific conditions...

PT-2026-72482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the LoongArch architecture, the kvm vcpu ioctl interrupt function can be called from userspace without proper validation of the interrupt request irq. This lack of validity checking...

PT-2026-72280

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the drm sched worker of the Linux kernel. The issue occurs when amdxdna drm submit execbuf passes a user-supplied command BO handle to amdxdna cmd...

CVE-2026-74261: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during resize sndseqfiforesize still needs to publish the replacement pool before it waits for FIFO users. A blocking sndseqread holds f-uselock while it sleeps, so concurrent senders must be abl...

CVE-2026-72483: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function handles USB hub class requests to the virtual root hub. In the default branches of both the ClearPortFeature and SetPortFeature switc...

PT-2026-72326

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xen/gntdev component where the gntdev ioctl map grant ref function fails to release a reference acquired by gntdev alloc map when it cannot copy the operation resu...

PT-2026-72670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpib module. In the command ioctl function, an error path inside a loop decrements the descriptor busy reference counter and breaks, but execution...

CVE-2026-72138: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

PT-2026-72919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Unprivileged users can invoke private ioctl commands because the system fails to verify the CAP NET ADMIN capability. This affects the SIOCDEVPRIVATE ioctl commands SIOC QETH ADP SET SNM...

PT-2026-72967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 pci component where the MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. This leads to a condition where...

PT-2026-72498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the SMB client during the validation of the PASSTHRU FSCTL response payload within the smb2 ioctl query info function. The issue occurs because the...

PT-2026-72281

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdxdna cmd submit function where it unconditionally calls xdna-dev info-ops-cmd submit. While aie2 dev ops defines this callback, aie4 vf ops the AIE4 SR-IOV...

PT-2026-72167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the liveupdate component where session ioctls are not properly validated against session types. Specifically, the PRESERVE FD operation is only applicable to outgoing...

CVE-2026-72106: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in listversiongetinfo sizeoftt-version is 12 bytes, but the code writes 16 bytes into the output buffer - info-vers-version0, info-vers-version1, info-vers-version2 and info-vers-next. This can...

Linux Distros Unpatched Vulnerability : CVE-2026-72106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-ioctl: fix a possible overflow in listversiongetinfo sizeoftt-version is 12 bytes, but the code writes 16 bytes into the output buffer - info-vers-version0,...

PT-2026-72295

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the dm-ioctl component. The list version get info function incorrectly uses sizeoftt-version, which is 12 bytes, while writing 16 bytes into the output buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-74467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/qeth: Check CAPNETADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE and SIOCQETHQUERYOAT with...

Linux Distros Unpatched Vulnerability : CVE-2026-74440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xeexecioctl only added the VM's dma-resv KERNEL slot as a dependency. That slo...