Linux Distros Unpatched Vulnerability : CVE-2026-74292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0 before checking whether item0 is within the enum item range. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-74366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix NULL deref in changestalinks for unready link ieee80211setactivelinks calls ieee80211linkusechannel for each newly-added link and WARNONONCEs ...

Linux Distros Unpatched Vulnerability : CVE-2026-72218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when...

Linux Distros Unpatched Vulnerability : CVE-2026-72227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: mcast: avoid OOB read of numdests header Before the access to struct batadvtvlvmcasttracker's numdests, it is attempted to check whether enough spac...

Linux Distros Unpatched Vulnerability : CVE-2026-72249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the...

Linux Distros Unpatched Vulnerability : CVE-2026-72297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after...

Linux Distros Unpatched Vulnerability : CVE-2026-72036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schmultiq: Replace direct dequeue call with peek and qdiscdequeuepeeked multiqdequeue takes a packet from a band's child with a direct -dequeue call...

Linux Distros Unpatched Vulnerability : CVE-2026-72167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: pl353: fix probe resource allocation During probe, the devmioremap is called with the parent device instead of the current one. So when the module...

Linux Distros Unpatched Vulnerability : CVE-2026-72175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series userfaultfd/pagemap: pre- existing fixes. These are pre-existing bug fixes that were carrie...

Linux Distros Unpatched Vulnerability : CVE-2026-74311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore...

Linux Distros Unpatched Vulnerability : CVE-2026-72021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header again in order to drive the IPVS SCTP state table. For IPv6 it...

Linux Distros Unpatched Vulnerability : CVE-2026-74330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfs: fix lockless traversals of -schildren Having the parent directory locked protects entries from removal by another thread, but it does not protect...

Linux Distros Unpatched Vulnerability : CVE-2026-72427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix effective prog array index with BPFFPREORDER replaceeffectiveprog and purgeeffectiveprogs located the slot in the effective array by walking the progra...

Linux Distros Unpatched Vulnerability : CVE-2026-72489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: nvec: fix use-after-free in nvecrxcompleted In nvecrxcompleted, when an incomplete RX transfer is detected, nvecmsgfree is called to return the message...

Linux Distros Unpatched Vulnerability : CVE-2026-72074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without...

Linux Distros Unpatched Vulnerability : CVE-2026-72176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/sysfs-schemes: put stats for schemeadddirs internal error damonsysfsschemeadddirs setup the triedregions directory after the stats directory setup is...

Linux Distros Unpatched Vulnerability : CVE-2026-72177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series mm/damon/sysfs- schemes: fix wrong directories put orders in error paths. Error...

Linux Distros Unpatched Vulnerability : CVE-2026-74321

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix invalid pointer dereference in btrfsrundelayedrefs In the beginning of the loop, we try to obtain a locked delayed ref head, if 'lockedref' is...

Linux Distros Unpatched Vulnerability : CVE-2026-72059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any ring...

Linux Distros Unpatched Vulnerability : CVE-2026-74433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed t...