EUVD-2026-58920

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2sumrightmostrec BUG On-disk corruption setting lnextfreerec to 0 in an inode's embedded extent list triggers a UBSAN panic on the next write to that file. CAUSE...

CVE-2026-72153 irqchip/crossbar: Use correct index in crossbar_domain_free()

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

EUVD-2026-58911

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

CVE-2026-72045 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

EUVD-2026-59110

In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing arrayindexnospec call to memtopgetpagecount 'level' is user space controlled and used to read from an array. Add the missing arrayindexnospec call to prevent speculative execution...

PT-2026-72424

In the Linux kernel, the following vulnerability has been resolved: s390/perf cpum cf: Add missing array index nospec to hw perf event init ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

PT-2026-72392

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX ROOT header validation Add a dedicated helper to perform stricter validation of $INDEX ROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

PT-2026-72615

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF F PREORDER replace effective prog and purge effective progs located the slot in the effective array by walking the program hlist and counting entries linearly. That count does not matc...

PT-2026-72711

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl cancel auto attach In cxl cancel auto attach, it assumes cxled-pos is a valid index for accessing p-targets. However, cxled-pos can be set to negative errno in cxl region sort targets i...

PT-2026-72350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array-index-out-of-bounds issue exists in the ocfs2 sum rightmost rec function. On-disk corruption that sets the l next free rec variable to 0 in an inode's embedded extent list can...

PT-2026-72399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntfs ir reparent function where the system updates the index root header before resizing the resident value. When the root stub requires more space than the existi...

Linux Distros Unpatched Vulnerability : CVE-2026-72206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform...

Linux Distros Unpatched Vulnerability : CVE-2026-72045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read...

Linux Distros Unpatched Vulnerability : CVE-2026-72236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after boun...

PT-2026-72748

In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhost vdpa mmap and vhost vdpa fault use vma-vm pgoff as a virtqueue index for get vq notification, but they do not validate that the index is smaller than v-nvqs. The...

Linux Distros Unpatched Vulnerability : CVE-2026-72211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident...

PT-2026-72847

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89 hw scan add chan ax for over 20 seconds, leading to a...

PT-2026-72483

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

PT-2026-72387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where resident $INDEX ROOT values are not fully validated during lookup. The index header fields, which are consumed by callers after lookup, lacked...

PT-2026-72845

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac id in link lookup The mac id field in RX descriptors is 8 bits wide 0-255, but assoc link on macid has only RTW89 MAX MAC ID NUM 128 entries. While the driver currently assigns mac id...