EUVD-2026-58961

In the Linux kernel, the following vulnerability has been resolved: ntfs: skip extent mft records in writeback to prevent deadlock This patch fixes the ABBA deadlock between extentlock and extent mreclock triggered by xfstests generic/113, that occurs since the commit 6994acf33bae "ntfs: use base...

CVE-2026-72203

CVE-2026-72203 concerns the Linux kernel NTFS driver and describes a deadlock (ABBA) between extent_lock and extent mrec_lock triggered by writes to normal extents and the $MFT folio. The fix removes all extent_lock and extent mrec_lock acquisitions from the MFT folio writeback path, eliminating ...

EUVD-2026-58948

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mreclock ABBA deadlock in rename ntfsfilefsync, ntfsdirfsync and ntfswriteinode lock an inode's mreclock before taking the mreclock of its parent directory. ntfsrename takes oldni-mreclock and olddirni-mreclock before...

CVE-2026-72174 fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole()

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix hugetlb self-deadlock in pagemapscanptehole A PAGEMAPSCAN ioctl requesting PMSCANWPMATCHING on a hugetlb VMA hangs the calling thread, unkillably, as soon as the scan reaches an unpopulated part of the range:...

CVE-2026-72174

CVE-2026-72174 affects the Linux kernel’s hugetlb mmap/pagemap handling. The vulnerability arises in fs/proc/task_mmu during a PAGEMAP_SCAN with PM_SCAN_WP_MATCHING on a hugetlb VMA, where walking hole entries via pagemap_scan_pte_hole() leads to a deadlock: the thread holds a read lock while att...

CVE-2026-72174 fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole()

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix hugetlb self-deadlock in pagemapscanptehole A PAGEMAPSCAN ioctl requesting PMSCANWPMATCHING on a hugetlb VMA hangs the calling thread, unkillably, as soon as the scan reaches an unpopulated part of the range:...

EUVD-2026-58910

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE. With CONFIGDEBUGATOMICSLEEP this triggers a warning when the IRQ wai...

CVE-2026-72142 i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...

EUVD-2026-58900

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...

CVE-2026-72142 i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...

CVE-2026-72142

CVE-2026-72142 affects the Linux kernel i2c/imx driver, fixing a locked bus on SMBus block-read of 0 (atomic). The vulnerability occurs when SMBus 3.1 6.5.7 allows a Block Read byte count of 0 but the atomic path rejects it (-EPROTO) and can start a new receive cycle, leaving SDA held and the bus...

CVE-2026-72141

CVE-2026-72141 covers a Linux kernel issue in the i2c/imx SMBus path where a Block Read with a count of 0 could cause the bus to stay locked. The vulnerability arises because the interrupt-driven state machine incorrectly handles -EPROTO for a zero-byte block read, failing to issue a NACK+STOP an...

EUVD-2026-58899

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-72141 i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-72138 xen/gntdev: fix error handling in ioctl

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

CVE-2026-72037 net: lan743x: Initialize eth_syslock spinlock before use

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

PT-2026-73013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the nh rt cache flush function, which is inlined into rtm new nexthop. The problem occurs when nh rt cache flush traverses t...

CVE-2026-72472: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi-rwsem to protect traversal of the file lock list Lingfeng identified a bug and suggested two solutions, but both appear to have issues. Generally, we cannot release flclock while iterating over the file lock list to...

PT-2026-72872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc component where the rxrpc kernel charge accept function reads rx-backlog without proper socket or backlog synchronization. This raw pointer is then passed to...

Linux Distros Unpatched Vulnerability : CVE-2026-74468

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. Th...