CVE-2026-72016

A flaw was found in the Linux kernel's CPU hotplug mechanism on arm64 systems. When a system is booted with more maximum CPUs configured than are physically present, some CPUs are incorrectly marked as present but are not fully registered. This can lead to a kernel warning due to a null kobject...

CVE-2026-74317

In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netifsetxpsqueue should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with number of CPUs =64, on E610 adapter, netdev is configured with maximu...

CVE-2026-72358

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

CVE-2026-72185

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARNON for resident attribute in ntfsmaprunlistnolock When ntfsmaprunlistnolock needs to look up the attribute extent containing a target VCN ctxneedsreset == true, it calls ntfsattrlookup and then expects the result to...

CVE-2026-72173

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72078

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint...

EUVD-2026-59464

In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netifsetxpsqueue should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with number of CPUs =64, on E610 adapter, netdev is configured with maximu...

EUVD-2026-59155

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtcluster: reject template conntracks in hash match xtclustermt treats any non-NULL nfctget result as a fully initialized conntrack and passes it to xtclusterhash. This causes a state confusion bug when the raw table C...

CVE-2026-72185 ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARNON for resident attribute in ntfsmaprunlistnolock When ntfsmaprunlistnolock needs to look up the attribute extent containing a target VCN ctxneedsreset == true, it calls ntfsattrlookup and then expects the result to...

EUVD-2026-58943

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARNON for resident attribute in ntfsmaprunlistnolock When ntfsmaprunlistnolock needs to look up the attribute extent containing a target VCN ctxneedsreset == true, it calls ntfsattrlookup and then expects the result to...

CVE-2026-72173

The CVE-2026-72173 entry concerns the Linux kernel vulnerability in fs/proc/task_mmu where a warning was emitted for non-migration PMD entries. The patch series mm/hmm: A fix and a selftest (2 patches) removes the stale assertion that only migration softleaf entries were supported at the PMD leve...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

PT-2026-72373

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN ON for resident attribute in ntfs map runlist nolock When ntfs map runlist nolock needs to look up the attribute extent containing a target VCN ctx needs reset == true, it calls ntfs attr lookup and then expects th...

PT-2026-72267

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint...

PT-2026-72546

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xe pt stage bind explicitly skips initializing the xe res cursor for purged BOs, treating them similarly to NULL VMAs by only setting t...

PT-2026-72246

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: preserve tc skb cb across defragmentation tcf ct handle fragments calls nf ct handle fragments without saving and restoring skb-cb. The defrag helper clears IPCB/IP6CB, which aliases the tc skb cb/qdisc skb cb...

DEBIAN-CVE-2026-68437

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...

CVE-2026-68437

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...

CVE-2026-68429

In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...

CVE-2026-68437 drm/imagination: Fit paired fragment job in the correct CCCB

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...