Linux Distros Unpatched Vulnerability : CVE-2026-74668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - packet: use consistent hardheaderlen in TXRING send path tpacketsnd reads dev-hardheaderlen independently for skb allocation and header construction in...

Linux Distros Unpatched Vulnerability : CVE-2026-74703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request...

PT-2026-79619

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

PT-2026-79635

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6 dev get from resurrecting inet6 dev in6 dev get reads dev-ip6 ptr under RCU and then unconditionally increments its refcount. Device teardown can clear the pointer and drop the last reference between these...

PT-2026-79592

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip last asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctp asconf queue teardown...

Linux Distros Unpatched Vulnerability : CVE-2026-74598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both chec...

PT-2026-79595

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf get fsverity digest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents...

Linux Distros Unpatched Vulnerability : CVE-2026-74593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx...

Linux Distros Unpatched Vulnerability : CVE-2026-74596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems...

PT-2026-79594

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk redir use-after-free in send verdict sk psock msg verdict takes a socket reference for psock-sk redir. tcp bpf send verdict copies that pointer while holding the source socket lock, but does not take a...

Linux Distros Unpatched Vulnerability : CVE-2026-74589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket reference for psock-skredir. tcpbpfsendverdict copies that pointer whi...

PT-2026-79600

In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscrypt ioctl set policy fscrypt ioctl set policy calls inode owner or capable with &nop mnt idmap before allowing an encryption policy to be set, instead of the idmap of the...

PT-2026-79602

In the Linux kernel, the following vulnerability has been resolved: ip6 tunnel: clear skb2-cb in ip6ip6 err ip6ip6 err clones an outer IPv6 ICMP error skb, pulls it to the quoted inner IPv6 packet, and then passes the clone to icmpv6 send. The clone still carries the outer packet's inet6 skb parm...

Linux Distros Unpatched Vulnerability : CVE-2026-74605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the...

PT-2026-79608

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlink info version fixed put treats it as a C string and may read beyond th...

Linux Distros Unpatched Vulnerability : CVE-2026-74591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a- conflict loop, xassetorder is applied repeatedly: each application...

PT-2026-79681

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vt k ioctl enforce, allowing a process to change meta mode on a non-controlling...

PT-2026-79655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the WMM param handler function within the rtl8723bs staging driver. The function copies a fixed-size WMM parameter element from a received information...

PT-2026-79662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fib nlmsg size function where nexthop space is incorrectly estimated by assuming every gateway is encoded as an IPv4 RTA GATEWAY attribute. Because IPv4 routes can...

PT-2026-79637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the reference-counted huge zero folio implementation. A race can occur between a shrinker decrementing the reference count to zero in the shrink huge zero foli...