CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

EUVD-2026-58981

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

CVE-2026-72006

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5stidxdata per cycle; kmemleak flags it as unreferenced...

CVE-2026-68461

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

CVE-2026-68458

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write in sndusbmidiakaioutput sndusbmidiakaioutput computes its fill- loop bound bufend = ep-maxtransfer - MAXAKAISYSEXLEN - 1; as a...

PT-2026-72188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipvs component where the ip vs get out rt function calls skb ensure writable, which can lead to the reallocation of skb-head. This necessitates reloading the IP...

PT-2026-72905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vc4 component where the binner BO, a 16MB buffer divided into 512KB slots, is recycled without being cleared between jobs. Each slot contains the Tile State Da...

Linux Distros Unpatched Vulnerability : CVE-2026-74272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Resolve region deletion races Sungwoo noticed that the sysfs trigger to delete a region may try to delete a region multiple times. It also has no...

Linux Distros Unpatched Vulnerability : CVE-2026-74458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A...

Linux Distros Unpatched Vulnerability : CVE-2026-74454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size vc4overflowmemwork points BPOA at a 512KB slot inside the 16MB binner BO, but writes t...

Linux Distros Unpatched Vulnerability : CVE-2026-74474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use pskbnetworkmaypull for transmit path header pulls In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the...

PT-2026-72539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic UDP Encapsulation GUE implementation where the guehdr priv flags len function returns 0 even when the GUE PFLAG REMCSUM flag is set. This allows packets...

Linux Distros Unpatched Vulnerability : CVE-2026-74397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5iballoctransportdomain allocates a transport domain and then may fail in...

Linux Distros Unpatched Vulnerability : CVE-2026-68457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: use opener credentials for FSCTL mutations SETSPARSE, SETZERODATA and SETCOMPRESSION operate on an open SMB handle but call VFS xattr, fallocate or...

Linux Distros Unpatched Vulnerability : CVE-2026-72147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and...

PT-2026-72192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A remotely triggered heap overflow exists in the brcmfmac module. The brcmf notify auth frame rx function calculates the frame length by subtracting the management header offset from the...

PT-2026-72213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac802154 module where the bulk hardware teardown path removes entries using list del. Because queue wake, stop, and disable paths traverse local-interfaces under...

PT-2026-72655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rpcrdma xprt connect function ignores the return value of frwr wp create. The frwr wp create function is responsible for creating a singleto...

PT-2026-72794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system on 64-bit systems regarding the mapping of fast commit wait and wake bits. Dynamic inode states are stored in the upper half of i flags, and the...