PT-2026-72761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt76 wifi driver where the mt76 put vif phy link function frees the offchannel mlink using kfree immediately after rcu assign pointerNULL. Because rcu assign point...

PT-2026-72773

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where NMI and tracepoint BPF programs can re-enter a per-CPU or global LRU lock that is already held by bpf lru pop free or push free on the same CPU...

PT-2026-72251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7621 GPIO driver where bank-shared fields, specifically rising and falling, are modified using non-atomic read-modify-write operations. Because each GPIO chip...

PT-2026-72502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the regulator core where the regulator lock two function incorrectly tests for EDEADLOCK instead of EDEADLK when handling return values from ww mutex lock. While these...

PT-2026-72774

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where sleepable BPF programs can be attached to the LSM cgroup. Because the cgroup shim operates under rcu read lock dont migrate, attaching sleepable BPF programs in thi...

PT-2026-72832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA mlx5 component where the mlx5r umr update xlt function allocates and DMA maps an XLT buffer using mlx5r umr create xlt. When mlx5 odp populate xlt fails, the...

PT-2026-72314

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists in the ISO Transport IsoTP protocol implementation. The isotp release function attempts to look up a bound network device using dev get by index an...

PT-2026-72330

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the i2c imx driver where the atomic polling path incorrectly rejects an SMBus block-read with a byte count of 0 as -EPROTO. This causes the system to return without...

PT-2026-72306

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the bcm rx handler function when an rx op is subscribed to all interfaces ifindex == 0. Because the same op is registered in a shared per-netns wildcard filter list...

PT-2026-72340

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tpm tis spi component where the wait event interruptible timeout function evaluates its condition after setting the current task state to TASK INTERRUPTIBLE. When...

PT-2026-72528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the microchip vcap implementation where VCAP instances on a chip are locked independently despite sharing the same Super VCAP hardware block, including the VCA...

PT-2026-72563

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS component where the afs vnode::lock work variable is not sufficiently initialized. Initializing it only once within the slab's init function is inadequate for...

CVE-2026-74331: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, fwpmnotify calls...

DEBIAN-CVE-2026-74248

OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected...

CVE-2026-74248

OpenStack Octavia up to version 18.0.0 is affected by CVE-2026-74248. The issue is a QoS policy authorization mishandling that occurs when an authenticated user associates another project’s QoS policy with an amphora, potentially preventing deletion of that policy and impacting all Octavia deploy...

CVE-2026-73627

A flaw was found in JupyterLab. An authenticated user can bypass administrator lock rules in the plugin manager by making direct requests to the /lab/api/plugins endpoint. This allows them to enable or disable plugins that were locked, including child plugins and those locked via the 'lock all'...

Apple now uses iPhone alerts for targets of mercenary spyware

Apple has expanded its threat-notification system for targets of mercenary spyware. Apple now shows a warning directly on an iPhone’s Lock Screen and in Settings when it believes the device owner has been targeted by mercenary spyware. The new on-device alert is meant to make a high-risk warning...

Linux Distros Unpatched Vulnerability : CVE-2026-73627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow ...

SUSE CVE-2026-68146

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...

SUSE CVE-2026-68405

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...