EUVD-2026-64567

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then unconditionally increments its refcount. Device teardown can clear the pointer and drop the last reference between these operations...

CVE-2026-74628

CVE-2026-74628 is a use-after-free in the Linux kernel's net/x25 (X.25 protocol) subsystem. The root cause is that x25 timers are armed with mod_timer() and cancelled with timer_delete(), meaning a pending timer holds no reference on the socket. Because x25_heartbeat_expiry() rearms unconditional...

PT-2026-79640

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit cursor bit cursor fetches the glyph under the cursor with c = scr readwvc pos; src = vc font.data + c & charmask w height; where charmask is 0x1ff when vc hi font mask is set. The...

PT-2026-79717

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create direct keys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmd exec+0x550/0xca0 mlx5 core Read of size 272 at addr 0000000176795020 by task...

Linux Distros Unpatched Vulnerability : CVE-2026-74613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 vsock/virtio: stop workers during the .remove made the RX worker jump to its commo...

Linux Distros Unpatched Vulnerability : CVE-2026-74639

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: us144mkii: re-anchor capture URBs on resubmission captureurbcomplete resubmits each capture URB without anchoring it: usbgeturburb %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-74712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0...

Linux Distros Unpatched Vulnerability : CVE-2026-74635

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: bitblit: bound-check glyph index in bitcursor bitcursor fetches the glyph under the cursor with c = scrreadwvcpos %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2026-74583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers...

Linux Distros Unpatched Vulnerability : CVE-2026-72393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: don't cache shinfo across skb realloc fbnictxlso calls skbcowhead which may reallocate the skb including the shared info. We can't use the pointer...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102005 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

Linux Distros Unpatched Vulnerability : CVE-2026-74351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: rebase copied fsdlm LVB pointers in lockingstate The lockingstate debugfs iterator snapshots struct ocfs2lockres by value under ocfs2dlmtrackinglock and...

Linux Distros Unpatched Vulnerability : CVE-2026-72197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In doaction's DeleteIndexEntryAllocation case, e-size comes from an on-disk INDEXBUFFER entry. When...

Linux Distros Unpatched Vulnerability : CVE-2026-74426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101984 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: validate MAC header was set before dumping it The fallback path of dumpmacheade...

Linux Distros Unpatched Vulnerability : CVE-2026-74267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever codel drops packets during peek, it calls...

Linux Distros Unpatched Vulnerability : CVE-2026-72133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrup...

Linux Distros Unpatched Vulnerability : CVE-2026-72335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: Fix adv monitor add failure cleanup hciaddadvmonitor publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration createsdwdailinks walks socdais until it finds an entry with initialised cleared, but socdais is allocated...

Linux Distros Unpatched Vulnerability : CVE-2026-72478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: add bounds check to rungethighestvcn rungethighestvcn parses a packed NTFS mapping- pairs buffer without any length bound, relying solely on a 0x00...