CVE-2026-72420

CVE-2026-72420 : In the Linux kernel, a race was reported between md/raid5 break_stripe_batch_list and raid5_make_request, involving sh->dev[i].flags (non-atomic write vs. atomic bit op) that could trigger a data race on R5_Overlap. The public descriptions provide a scenario where CPU1 clears ...

EUVD-2026-59319

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72121 can: bcm: add locking when updating filter and timer values

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when updating timer and filter content while bcmrxhandler, bcmrxtimeouthandler...

EUVD-2026-58879

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when updating timer and filter content while bcmrxhandler, bcmrxtimeouthandler...

CVE-2026-72121

CVE-2026-72121 describes a Linux kernel CAN subsystem vulnerability in which KCSAN detected a race condition updating timer and filter state during CAN message handling. The fix introduces a per-operation bcm_rx_update_lock to serialize updates to timer values (ival1/ival2/kt_ival1/kt_ival2/kt_la...

CVE-2026-72118

CVE-2026-72118 concerns a data race in the Linux kernel CAN subsystem (bcm) where two CPUs simultaneously receive CAN frames, triggering KCSAN complaints in bcm_rx_handler(). The fix uses atomic operations on statistics counters (signed long) in hot paths and refactors updates to bcm_update_rx_st...

CVE-2026-72118 can: bcm: fix CAN frame rx/tx statistics

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

EUVD-2026-59076

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

CVE-2026-72118 can: bcm: fix CAN frame rx/tx statistics

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

Linux Distros Unpatched Vulnerability : CVE-2026-72118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed ...

PT-2026-72307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists within the bcm rx handler function when two CAN frames are received and processed simultaneously in a single rx operation by two different CPUs. This issue occurs...

PT-2026-72310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the CAN BCM module where simultaneous access to timer and filter values can occur. Specifically, bcm rx setup can overwrite values while bcm rx handler, bcm rx...

PT-2026-72608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the md/raid5 component between the break stripe batch list and raid5 make request functions. The issue occurs on the sh-devi.flags variable due to a conflict betwee...

Linux Distros Unpatched Vulnerability : CVE-2026-72121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when...

CVE-2026-72118: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

Linux Distros Unpatched Vulnerability : CVE-2026-72420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write...

CVE-2026-64588

The CVE-2026-64588 entry describes a Linux kernel data-race in fuse-uring on ring->ready. The root cause is a weak-ordering issue where a store to fiq->ops could be reordered past ring->ready, allowing a CPU that observes ring->ready == true to dispatch via a stale fiq->ops pointer...

AZL-93584 CVE-2026-64435 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qlen via skbqueuelen without holding the queue lock or using READONCE, while kauditd writes to this field via the skbdequeue → skbunlin...

CVE-2026-63871

CVE-2026-63871 concerns the Linux kernel Bluetooth ISO path. The issue is a data-race on the iso_pi fields passed to hci_get_route() in iso_connect_bis(), iso_connect_cis(), iso_listen_bis(), and iso_conn_big_sync(), which read iso_pi(sk)->dst/src/src_type without holding lock_sock(). Concurre...

CVE-2026-63871: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix data-race on isopi fields in hcigetroute calls isoconnectbis, isoconnectcis, isolistenbis, and isoconnbigsync call hcigetroute using isopisk-dst, isopisk-src, and isopisk-srctype without holding locksock. Thes...