PT-2026-72968

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

PT-2026-73008

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi tcp: Bound SCSI Response data segment to the connection buffer iscsi tcp hdr dissect receives the data segment of several PDU types into the fixed-size conn-data buffer, which is allocated for ISCSI DEF MAX RECV SE...

PT-2026-72942

In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints dump queue state through tipc sk dump. Most queue-dump callsites already serialize that walk under the socket lock or sk-sk lock.slock, but tipc poll...

Linux Distros Unpatched Vulnerability : CVE-2026-74518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: fix list corruption in allocatefileregionentries allocatefileregionentries tops up resv-regioncache with freshly allocated fileregion descriptors. T...

Linux Distros Unpatched Vulnerability : CVE-2026-74517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Cancel and flush the I/O APIC's delayed EOI handling work during the pre VM destroy phase...

Linux Distros Unpatched Vulnerability : CVE-2026-74487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write...

Linux Distros Unpatched Vulnerability : CVE-2026-74338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs...

Linux Distros Unpatched Vulnerability : CVE-2026-74463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C...

Linux Distros Unpatched Vulnerability : CVE-2026-74525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and...

Linux Distros Unpatched Vulnerability : CVE-2026-74512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter...

Linux Distros Unpatched Vulnerability : CVE-2026-74536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: fix leaking sk after socket release isosockkill tests !sockflagsk, SOCKZAPPED || sk-sksocket || sockflagsk, SOCKDEAD for early return, but this ...

Linux Distros Unpatched Vulnerability : CVE-2026-74575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Prevent XDomain delayed work use-after-free on disconnect tbxdphandlerequest runs on systemwq and queues xd-statework via queuedelayedwork in three...

Linux Distros Unpatched Vulnerability : CVE-2026-74480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelp...

Linux Distros Unpatched Vulnerability : CVE-2026-74550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tre...

Linux Distros Unpatched Vulnerability : CVE-2026-74497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result...

PT-2026-72856

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VM IO or VM PFNMAP when creating SVM ranges VMAs marked with VM IO or VM PFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, get pages...

PT-2026-72834

In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad failure when state is no longer POSTDAD addrconf dad failure transitions ifp-state from DAD to POSTDAD via addrconf dad end, which drops ifp-lock on return. The lock is re-acquired after net info...

PT-2026-72820

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvme ns head struct nvme ns head contains a flexible array member, current path, which is indexed using the NUMA node ID: head-current pathnuma node id The structure is currently...

PT-2026-72789

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resume all after suspend all Need to restore any good queues even if the suspend all failed for some. Always run remove queue as that will schedule a GPU reset is removing the queue fails. v2: move resume all...

PT-2026-72863

In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network namespace to make sure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls a...