CVE-2026-72416 netfilter: nft_compat: ebtables emulation must reject non-bridge targets

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcompat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verdicts: NFACCEPT, NFDROP, and so on. ebtables targets return incompatible verdicts: EBTACCEPT, EBTDROP, ... We cannot allo...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

EUVD-2026-59313

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414

The CVE-2026-72414 entry concerns the Linux kernel component net: dsa: sja1105. The issue arises when pin_duration, derived from a user-provided period, is converted to SJA1105 clock ticks and passed as the cycle_time to future_base_time(); very small values can become zero, causing a division by...

CVE-2026-72412

The CVE-2026-72412 entry concerns the Linux kernel s390/mm subsystem and the _PAGE_UNUSED (PAGE_UNUSED) PTE bit. Root cause: KVM could set the bit for unmapped guest pages; later paths could leave it set, so present pages might be treated as unused, risking guest corruption. The fix implemented i...

CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72413

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72412

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

EUVD-2026-59312

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72412 s390/mm: Fix handling of _PAGE_UNUSED pte bit

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72412 s390/mm: Fix handling of _PAGE_UNUSED pte bit

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72413

The CVE-2026-72413 entry describes a Linux kernel SCTP issue where an err_chunk allocated during INIT handling in sctp_verify_init() could leak in multiple code paths (INIT handling in sctp_sf_do_5_1B_init and sctp_sf_do_unexpected_init, including the success path). The workaround/mitigation is t...

EUVD-2026-59311

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72413 sctp: fix err_chunk memory leaks in INIT handling

In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this chunk is leaked in several code paths: 1. In sctpsfdo51Binit, if...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

EUVD-2026-59310

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72411

The CVE-2026-72411 issue affects the Linux kernel’s DSA mxl862xx code. A use-after-free could occur when handling an MDIO CRC error: mxl862xx_crc_err_work_fn() iterates DSA ports and closes CPU conduits, while mxl862xx_remove() unregisters the switch and cancels the work. If CRC error work runs a...