CVE-2026-74280 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sgcleanup path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

CVE-2026-74275

The CVE-2026-74275 entry is about the Linux kernel driver cxl/region where cxl_cancel_auto_attach() can access p->targets[] using a potentially negative index cxled->pos. The root cause is that cxled->pos may be set to a negative errno in cxl_region_sort_targets() if cxl_calc_interleave_...

CVE-2026-72428

Summary: This CVE concerns the Linux kernel’s BPF Spectre v4 sanitization logic. The root cause is in check_stack_write_fixed_off(), which computes the byte slot incorrectly (-off - 1) and records writes in slot_type[] using (slot - i) % BPF_REG_SIZE. The sanitization pre-check used slot_type[i],...

CVE-2026-72428 bpf: Fix stack slot index in nospec checks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

CVE-2026-72295

Technical details (affected product/version, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2026-72295 LoongArch: KVM: Validate irqchip index in irqfd routing

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

CVE-2026-72236 s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

In the Linux kernel, the following vulnerability has been resolved: s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

EUVD-2026-59135

In the Linux kernel, the following vulnerability has been resolved: s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

CVE-2026-72236

CVE-2026-72236 concerns the Linux kernel: on s390 architecture, in the perf_cpum_cf path, __hw_perf_event_init() was missing an array_index_nospec() barrier. The ev variable, controlled by userspace via event->attr.config, could be used as an array index after bounds checks without speculative...

CVE-2026-72211 ntfs: grow index root value before reparent header update

In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...

EUVD-2026-58964

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform stricter validation of INDEXHEADER geometry in INDX blocks, and update ntfslookupinodebyname to use that function to validate INDX blocks...

CVE-2026-72206

The CVE-2026-72206 entry concerns the Linux kernel NTFS index block validation. A stricter validation was added for INDEX_HEADER geometry in INDX blocks via ntfs_index_block_inconsisent(), and ntfs_lookup_inode_by_name() was updated to use this validation. This fixes a vulnerability in how INDX b...

CVE-2026-72206 ntfs: validate index block header more strictly

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform stricter validation of INDEXHEADER geometry in INDX blocks, and update ntfslookupinodebyname to use that function to validate INDX blocks...

EUVD-2026-58962

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

CVE-2026-72204 ntfs: centalize $INDEX_ROOT header validation

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

CVE-2026-72204

In the Linux kernel NTFS code, CVE-2026-72204 targets the validation of the $INDEX_ROOT header. A dedicated helper was added to perform stricter validation of $INDEX_ROOT and is used for both directory inodes and named index inodes, ensuring consistent checks on root size and header geometry acro...

CVE-2026-72201

CVE-2026-72201 affects the Linux kernel NTFS implementation where index entries are validated after reading an index root or block. Root cause: insufficient immediate validation of index entries during lookup/readdir paths, leading to potential missed checks. The CVSS appears CRITICAL (Network, N...

EUVD-2026-58959

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...

CVE-2026-72201 ntfs: validate index entries on reading

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...

EUVD-2026-58957

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEXROOT values carry index header fields that callers consume after lookup. Some callers already validate parts of the layout before walking entries, but those check...