Linux Distros Unpatched Vulnerability : CVE-2026-74553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nct6775-core Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three temperature registers, and with it only three...

PT-2026-72856

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VM IO or VM PFNMAP when creating SVM ranges VMAs marked with VM IO or VM PFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, get pages...

PT-2026-72834

In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad failure when state is no longer POSTDAD addrconf dad failure transitions ifp-state from DAD to POSTDAD via addrconf dad end, which drops ifp-lock on return. The lock is re-acquired after net info...

PT-2026-72820

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvme ns head struct nvme ns head contains a flexible array member, current path, which is indexed using the NUMA node ID: head-current pathnuma node id The structure is currently...

PT-2026-72789

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resume all after suspend all Need to restore any good queues even if the suspend all failed for some. Always run remove queue as that will schedule a GPU reset is removing the queue fails. v2: move resume all...

PT-2026-72864

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc recvmsg Fix a double unlock in rxrpc recvmsg when dealing with OOB messages...

PT-2026-72677

In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec rx completed In nvec rx completed, when an incomplete RX transfer is detected, nvec msg free is called to return the message back to the pool by clearing its 'used' atomic flag. Immediate...

PT-2026-72782

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug during a previous patch: https://sashiko.dev//patchset/20260512183852.614045-1-jmoroni%40google.com This change fixes the bug by eliminating...

PT-2026-72805

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix u-a-f in luo file unpreserve files and luo file finish In luo file unpreserve files and luo file finish, reorder module put and xa erase to ensure the file handler module remains pinned while its operations are...

PT-2026-72528

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...

PT-2026-72533

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5 lag create single fdb starts from i, so the failed index itself is rolled back. That can operate on uninitialized...

PT-2026-72241

In the Linux kernel, the following vulnerability has been resolved: net: ip6 gre: require CAP NET ADMIN in the device netns for changelink ip6gre changelink and ip6erspan changelink operate on at most two netns, dev netdev and the tunnel link netns t-net. They differ once the device is created in...

PT-2026-72297

In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure reserve metadata snap and release metadata snap modify the superblock's held root directly in the block manager's buffer. If the subsequent metadata commit...

PT-2026-72267

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint...

PT-2026-72282

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna gem dmabuf mmap When vm insert pages fails, the error path calls vma-vm ops-closevma which internally calls drm gem vm close → drm gem object put, releasing the GEM object reference...

PT-2026-72265

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims pcu irq debug logging The debug logging in ims pcu irq unconditionally prints data from pcu-urb in buf. However, if the interrupt fired for pcu-urb ctrl, the actual data resides in...

PT-2026-72249

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: icssg: guard PA stat lookups icssg ndo get stats64 unconditionally calls emac get stat by name with FW PA stat names regardless of whether the PA stats block is present on the hardware. emac get stat by name...

PT-2026-72701

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID QUEUE ID mana gd create mana wq cq leaves queue-id as 0 from kzalloc obj until mana create wq obj assigns the firmware-returned id. If creation fails before that, cleanup calls mana ...

PT-2026-72767

In the Linux kernel, the following vulnerability has been resolved: firmware loader: Fix recursive lock in device cache fw images A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, fw pm notify...

PT-2026-72762

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcim iomap region or devm kmemdup fail, the code returns directly without cleaning up previously allocated resources: - mt76 device allocated by mt76 alloc device - p...