CVE-2026-72422: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn-preauthinfo in concurrent SMB2 NEGOTIATE conn-preauthinfo is shared connection state struct preauthintegrityinfo, kmalloc-96 that is allocated and freed by the SMB2 NEGOTIATE handler and read by...

PT-2026-72934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the folio split function. The function continues to dereference the mapping after a split occurs, specifically during the...

Linux Distros Unpatched Vulnerability : CVE-2026-74317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ixgbe: do not configure xps for XDP queues netifsetxpsqueue should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with...

Linux Distros Unpatched Vulnerability : CVE-2026-72084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESER...

Linux Distros Unpatched Vulnerability : CVE-2026-72336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before...

Linux Distros Unpatched Vulnerability : CVE-2026-72299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock...

Linux Distros Unpatched Vulnerability : CVE-2026-74310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubufinfo per outstanding zerocopy TX descriptor and hands it to the backend socket. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Fix advertising data UAFs hcifindadvinstance returns an advinfo pointer that is valid only while hdev-lock is held. The advertising...

Linux Distros Unpatched Vulnerability : CVE-2026-74257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg...

Linux Distros Unpatched Vulnerability : CVE-2026-74553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nct6775-core Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three temperature registers, and with it only three...

Linux Distros Unpatched Vulnerability : CVE-2026-74493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a...

Linux Distros Unpatched Vulnerability : CVE-2026-74489

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tidtx use-after- free on BA session stop ieee80211stoptxbacb hands tidt...

Linux Distros Unpatched Vulnerability : CVE-2026-74519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap...

PT-2026-72945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the net/smc component during link group termination. The function smc lgr terminate releases the conns lock after locating a connection in lgr-conns all...

PT-2026-72793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu coredump ring dump The ring content dump in amdgpu coredump uses two separate loops over adev-rings: the first counts rings with unsignalled fences to size the allocation, and th...

PT-2026-72541

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfs attr fallocate allocates holes and delayed allocations inside initialized size by looking up the current runlist element under ni-runlist.lock. The returned struct...

PT-2026-72958

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the AFS component of the Linux kernel. The problem occurs in the afs make call function due to a race condition between asynchronous call reception a...

PT-2026-72610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ksmbd component during concurrent SMB2 NEGOTIATE requests. The smb2 handle negotiate function allocates the conn-preauth info variable, which is shar...

PT-2026-72524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth 6LoWPAN implementation. The get l2cap conn function retrieves an LE hci conn under hdev protection but releases that protection before...

PT-2026-72523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where a slab-use-after-free occurs during the cleanup of an advertising monitor addition failure. The function hci add adv monitor publish...