Linux Distros Unpatched Vulnerability : CVE-2026-74523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink...

Linux Distros Unpatched Vulnerability : CVE-2026-74563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a scoped IPv6 interface with devgetbyindexrcu, drops the RCU...

Linux Distros Unpatched Vulnerability : CVE-2026-72472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs: use nfsi-rwsem to protect traversal of the file lock list Lingfeng identified a bug and suggested two solutions, but both appear to have issues. Generally,...

Linux Distros Unpatched Vulnerability : CVE-2026-74307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as t...

Linux Distros Unpatched Vulnerability : CVE-2026-74463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C...

PT-2026-72313

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ISO Transport Protocol ISOTP implementation of the CAN subsystem. The TX state machine, managed by the variable so-tx.state, is driven by sendmsg, the RX path for...

PT-2026-72329

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13 Description An issue exists in the i2c imx driver where the interrupt-driven block-read state machine incorrectly handles a Block Read byte count of 0. In this scenario, the system rejects the request as...

PT-2026-72520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the Linux kernel when the function amdxdna hwctx sync debug bo invokes the hardware hwctx sync debug bo callback while holding the xdna-dev lock lock. This callback...

PT-2026-72576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the fence lock is not acquired using an IRQ-safe variant. Because dma fence objects can be shared with other subsystems, they may be...

PT-2026-72743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular lock dependency exists in the ext4 filesystem when using the EXT4 IOC MOVE EXT ioctl. The issue occurs because the validation to ensure the donor file belongs to the same...

PT-2026-72790

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf component where zap vma range requires the owning mm's mmap lock to be held. Attempting to take mmap read lock while holding arena-lock creates an AB-BA deadlo...

CVE-2026-72388: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dmafence objects can be shared with other subsystems, they may be accessed from hardirq context in those drivers, and we have to take that into...

CVE-2026-74307: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

PT-2026-72650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the AppArmor module during unix socket mediation when peer path is used. The issue occurs because holding a reference to the peer sk does not guarantee access ...

PT-2026-72767

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, the fw pm notify function calls...

CVE-2026-74337: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpflrupopfree/pushfree already hold on the same CPU, AA-deadlocking. Lockdep reports...

PT-2026-72204

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fs/resctrl component where a pseudo-locked group's RMID Resource Monitoring ID is freed during its creation. During an unmount operation, the rmdir all sub functio...

PT-2026-72635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCTP DIAG endpoint dumping process. The system traverses endpoint address lists without holding the lock sock lock, while these lists can be modified...

PT-2026-72852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the radeon ring restore function when radeon ring lock fails. The radeon ring restore function is responsible for freeing the data buffer allocated by radeon ring...

PT-2026-72752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System server NFSD where the nfsd4 drop revoked stid function lacks a case for SC TYPE LAYOUT. When a client sends a FREE STATEID request for an...