CVE-2026-72166 net/9p: fix infinite loop in p9_client_rpc on fatal signal

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

CVE-2026-72089 accel/ivpu: Reject firmware log with size smaller than header

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fwlogfrombo validates the tracing buffer headersize and that the log fits within the BO, but never checks that log-size is at least log-headersize. fwlogprintbuffer th...

CVE-2026-72029 net: wwan: iosm: bound device offsets in the MUX downlink decoder

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder muxdladbdecode walks a chain of aggregated datagram tables using offsets and lengths taken from the modem. firsttableindex, nexttableindex, tablelength,...

EUVD-2026-58987

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder muxdladbdecode walks a chain of aggregated datagram tables using offsets and lengths taken from the modem. firsttableindex, nexttableindex, tablelength,...

CVE-2026-72193: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTARTTABLE free-chain walker at rt-used A crafted NTFS3 disk image triggers an in-kernel infinite loop at mount time, hanging the mounting thread and firing the soft-lockup watchdog within 22s on multi-CPU hosts pani...

CVE-2026-74420: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages relies o...

CVE-2026-74276: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-74411: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89hwscanaddchanax for over 20 seconds, leading to a system...

CVE-2026-74431: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpcrecvmsg Fix the wait in rxrpcrecvmsg also take check the oob queue...

CVE-2026-72166: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop:...

PT-2026-72856

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/gpusvm component where Virtual Memory Areas VMAs marked with VM IO or VM PFNMAP are not backed by struct page objects. Since GPUSVM requires these objects to...

PT-2026-72354

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.4 through 6.12.77 Description An infinite loop occurs in the p9 client rpc function when it is called with the type P9 TFLUSH and the transport has no peer, such as an fd transport backed by pipes without a 9p server...

PT-2026-72712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Xilinx SPI driver regarding how the FIFO First-In, First-Out buffer size is determined. The driver incorrectly calculates the size by writing to the TX FIFO regist...

PT-2026-72847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 Wi-Fi driver where an incorrect data type for the scan index can lead to an infinite loop during Wi-Fi scanning on the 6GHz band. This causes a kernel soft...

PT-2026-72867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential infinite loop exists within the rxrpc recvmsg function. This occurs because the wait mechanism in rxrpc recvmsg fails to properly check the out-of-band oob queue...

PT-2026-72381

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the ntfs3 driver allows a crafted NTFS3 disk image to trigger an in-kernel infinite loop during mount time. This occurs because the check rstbl function iterates through a...

Linux Distros Unpatched Vulnerability : CVE-2026-72166

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed b...

SUSE CVE-2026-56862

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

CVE-2026-49263

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...

CVE-2026-49263

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...