drm/vc4: Prevent shader BO mappings from becoming writable

...

CVE-2026-72292: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVMS390GETCMMABITS memory kvms390getcmmabits allocates its output buffer with vmalloc, which does not zero the returned pages: values = vmallocargs-count; In the non-peek migration path, datgetcmma reports a...

CVE-2026-72101: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integrity is supposed to zero the remaining space. There was a bug in the code that zeroing didn't work. This commit fixes it...

Linux Distros Unpatched Vulnerability : CVE-2026-74448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process,...

Linux Distros Unpatched Vulnerability : CVE-2026-74444

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-72070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libertastf: fix use-after-free in lbtffreeadapter lbtffreeadapter calls timerdelete&priv-commandtimer, which does not wait for a running commandtimerfn...

PT-2026-72239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the octeontx2-af driver when the nix setup bpids function fails. The function allocates a BPID bitmap using rvu alloc bitmap, which relies on kcalloc. If subseque...

PT-2026-72203

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DRBD module where the recv dless read function fails to properly validate the payload size of a P DATA REPLY received from a peer. The payload length is handled as...

PT-2026-72896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vmwgfx component where the vmw cmd draw function fails to properly validate the header-size variable before performing a division operation. Because header-siz...

PT-2026-72661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xprtrdma module where a single reference count rl kref was used to manage two distinct lifetimes: the wake-up of an RPC task upon reply and the return of an rpcrdm...

Linux Distros Unpatched Vulnerability : CVE-2026-72123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 can: bcm: use callrcu instead of costly synchronizercu replaced...

Linux Distros Unpatched Vulnerability : CVE-2026-72213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup...

Linux Distros Unpatched Vulnerability : CVE-2026-72066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpu: hotplug: Bound hotplug states sysfs output statesshow adds CPU hotplug state names into a single sysfs buffer using sprintf. With enough registered states,...

Linux Distros Unpatched Vulnerability : CVE-2026-74561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nexthop: avoid unlocked f6ilist walk in nhrtcacheflush nhrtcacheflush walks nh-f6ilist during an RTNL-serialized nexthop replace without holding nh-lock, racing...

Linux Distros Unpatched Vulnerability : CVE-2026-74324

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: validate skb length in testmode query In mt7925tmquery, the response skb from mt76mcusendandgetmsg is used in a memcpy without validating i...

PT-2026-72357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kho component where scratch sizes specified via the command line are not rounded up to CMA MIN ALIGNMENT BYTES. While this rounding occurs when using scratch scale...

PT-2026-72788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists where the global pointer reserved mem continues to reference the reserved mem array located in initdata if the alloc reserved mem array function fails...

PT-2026-72214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/monwriter component where the system fails to verify if the data length remains consistent when data buffers are reused, such as for interval sample records. ...

PT-2026-72615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the replace effective prog and purge effective progs functions incorrectly locate slots in the effective array when BPF F PREORDER programs are...

PT-2026-72839

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: ccp component where page allocation failures are not correctly handled in TIO. When snp alloc firmware pages returns NULL due to memory pressure, passing...