Linux Distros Unpatched Vulnerability : CVE-2026-72245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be...

Linux Distros Unpatched Vulnerability : CVE-2026-72013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101998 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIEECHO processing When a listening SCTP serve...

Linux Distros Unpatched Vulnerability : CVE-2026-72491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while...

Linux Distros Unpatched Vulnerability : CVE-2026-72386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pending tileroomwork, so we need to release it if th...

CVE-2026-72136

A flaw was found in the Linux kernel's xfrminterface component. A local attacker with specific network administration privileges in one network namespace could exploit this vulnerability to modify the configuration of a network interface in a different network namespace where they are not...

CVE-2026-72135

A flaw was found in the Linux kernel's Trusted Platform Module TPM character devices. These devices, intended for sequential command processing, incorrectly allow positional input/output I/O operations. A local attacker can exploit this by using a large offset in a positional read operation,...

CVE-2026-72134

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI driver for i.MX systems. When a Direct Memory Access DMA transfer cannot be started, the system attempts to use a Programmed Input/Output PIO transfer instead. However, the SPI controller is not correctly reconfigured for PIO...

CVE-2026-72133

A flaw was found in the Linux kernel's spi: uniphier driver. The driver attempts to use an internal synchronization mechanism before it has been properly set up. If an interrupt occurs at a precise moment, the system may try to operate on this uninitialized mechanism, leading to unpredictable...

CVE-2026-72132

A flaw was found in the Linux kernel's Network File System NFS component. The nfsfoliomarkunstable and nfsfolioclearcommit functions incorrectly account for unstable writes, charging the full folio size for each sub-folio request. This inflated accounting can push the system's dirty page threshol...

CVE-2026-72131

A flaw was found in the Linux kernel's nvme-apple driver affecting Apple A11 devices. This vulnerability occurs when Non-Volatile Memory Express NVMe command tags are not unique across the administrative and input/output queues. An attacker could exploit this by sending specially crafted commands...

CVE-2026-72129

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

CVE-2026-72128

A flaw was found in the nvmet NVMe over Fabrics target component of the Linux kernel. This vulnerability occurs in the nvmetsqcreate function, where a reference to a controller object is not properly released if a specific check fails. An attacker could potentially exploit this reference count le...

CVE-2026-72126

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability arises from a race condition where the isotprelease function can cancel a timer while it is still actively being used by isotprcv. This can lead to a use-after-free condition, which a local...

CVE-2026-72125

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP protocol. A memory corruption vulnerability, specifically a use-after-free race condition, can occur during the unregistration of a network device. This happens when the system attempts to free a socket while a CAN filter...

CVE-2026-72124

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP transport protocol module. A race condition in the transmit TX state machine allows for unsynchronized state transitions. This can lead to a situation where a frame or timer callback operates on an outdated state, resulting...

CVE-2026-72123

A use-after-free flaw was found in the Linux kernel's CAN BCM Broadcast Manager subsystem. During RX operation teardown, a concurrent receive handler can race and re-arm the throttle timer after the operation has been scheduled for deallocation. When the deallocation completes, the timer is still...

CVE-2026-72122

A flaw was found in the CAN BCM Controller Area Network Broadcast Manager module of the Linux kernel. A race condition exists where a socket intended for a specific CAN interface can silently be reconfigured to receive messages from any interface. This occurs due to inconsistent reads of socket...

CVE-2026-72121

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcom bcm driver. A race condition exists when the driver attempts to update filter and timer values simultaneously with ongoing receive operations. This can lead to the transmission of stale CAN reply frames with an incorrect...

CVE-2026-72120

A flaw was found in the Linux kernel's can: bcm module. Missing Read-Copy-Update RCU list annotations and operations can lead to improperly initialized or removed bcmop structures. This improper handling may cause system instability or a denial of service when these structures are accessed...