PT-2026-79653

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw cfg80211 monitor if xmit entry removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains. The data...

PT-2026-79671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where packet set ring updates the RX ring state under sk receive queue.lock but publishes the tpacket receive mode through po-prot hook.func after releasing that lock. Th...

PT-2026-79724

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM LINK and ADD LINK CONT in smc llc event handler The SMC LLC CONFIRM LINK / SMC LLC ADD LINK CONT branch in smc llc event handler stores an incoming qentry into the local LLC flow without...

PT-2026-79610

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-is freed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. A...

Linux Distros Unpatched Vulnerability : CVE-2026-74596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems...

Linux Distros Unpatched Vulnerability : CVE-2026-74617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs...

PT-2026-79639

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring buffer subbuf order set frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rb advan...

Linux Distros Unpatched Vulnerability : CVE-2026-74673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-fiel...

PT-2026-79641

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between update event fields and, event define fields The following sequence may leads race between event define fields and update event fields: CPU0 loads module A CPU1 loads module B...

PT-2026-79634

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb clientid arr A dibs device interrupt handler can be active after dibs dev del and may still access dmb clientid arr. UAF In case of a failure in dibs dev add being called by dibs lo dev probe dmb...

PT-2026-79669

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovs flow cmd new preallocates the optional reply skb before it takes ovs mutex and before it knows which existing flow will be updated. That is normally fine because...

PT-2026-79699

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI CMD SEND CMD payload length ncsi send cmd nl takes the number of bytes to copy from the attacker-controlled ncsi pkt hdr.length field of the in-band packet header, while the source buffer is th...

PT-2026-79632

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have net iov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopy fill skb from devmem...

PT-2026-79670

In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments through an xdp buff. If an XDP program adjusts the fragment area, bpf prog run generic xdp copies xdp frags size back t...

PT-2026-79687

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data ep set params sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urb packs; u-buffer size = maxsize u-packets; if fmt-fmt...

PT-2026-79660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qcom-geni UART driver where flushing the transmit buffer during an ongoing TX DMA Direct Memory Access causes the UART to infinitely repeat corrupted TX DMA frames...

PT-2026-79658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NXP LPC32xx UART PORT LPC3220 where an RX character-timeout interrupt can be latched while the RX FIFO is empty. In this state, the Interrupt Identification Regist...

PT-2026-79668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network scheduler where overly deep qdisc queueing discipline hierarchies can cause excessive recursion in qdisc tree walkers. This recursion can lead to the...

PT-2026-79731

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary is promisc under RTNL in bond alb monitor bond alb monitor reads primary is promisc under RCU, then drops RCU and takes RTNL via rtnl trylock before undoing the promiscuity it set on the active slav...

Linux Distros Unpatched Vulnerability : CVE-2026-74601

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Use currentcontext for safe per-CPU buffer swap The ringbufferswapcpu function currently checks the per-CPU committing counter to determine if a...