PT-2026-79679

In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page table reclaim When zap pte range reclaims a page table, it does: pte free tlbtlb, pmd pgtablepmdval, addr; and this is unconditionally wrong: if this code executes, addr always point...

PT-2026-79620

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan changelink arms vxlan-age timer whenever the requested ageing interval differs from the configured one: if conf.age interval != vxlan-cfg.age interval mod...

PT-2026-79716

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus Fix type confusion in notification logic Sashiko reports: At the start of the loop in pmbus notify, the code unconditionally casts every attribute to a struct sensor device attribute: drivers/hwmon/pmbus/pmbus...

PT-2026-79632

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have net iov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopy fill skb from devmem...

PT-2026-79693

In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp make heartbeat ack caches the destination transport in chunk-transport without taking a reference. When src out of asoc ok is enabled, the HEARTBEAT ACK may remain...

Linux Distros Unpatched Vulnerability : CVE-2026-74643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/damon/mtier: error out for zero quota goal target values Patch series mm/damon: avoid division by zero from damosquotascore. DAMONSAMPLEMTIER and...

Linux Distros Unpatched Vulnerability : CVE-2026-74601

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Use currentcontext for safe per-CPU buffer swap The ringbufferswapcpu function currently checks the per-CPU committing counter to determine if a...

Linux Distros Unpatched Vulnerability : CVE-2026-74686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of the waiter queue is suppressed for rqspinlock in cases where a deadlock i...

Linux Distros Unpatched Vulnerability : CVE-2026-74726

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: alb: re-check primaryispromisc under RTNL in bondalbmonitor bondalbmonitor reads primaryispromisc under RCU, then drops RCU and takes RTNL via...

Linux Distros Unpatched Vulnerability : CVE-2026-74600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagetablecheck: skip special zero mappings pagetablecheckset and pagetablecheckclear account mappings based on PageAnon. Shared zero-page PTEs and huge zero...

Linux Distros Unpatched Vulnerability : CVE-2026-74599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/ptdump: always stabilise against page table freeing using initmm Previous commits have established the invariant that kernel page table freeing is performed...

Linux Distros Unpatched Vulnerability : CVE-2026-74616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe...

Linux Distros Unpatched Vulnerability : CVE-2026-74687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: at91sam9wdt: prevent timer rearm during teardown at91ping rearms the watchdog timer from its callback. timerdelete neither waits for a running callbac...

Linux Distros Unpatched Vulnerability : CVE-2026-74622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atlantic: free RX pages of consumed but not refilled buffers aqringrxdeinit only walks swhead, swtail, the region posted to hardware. Since the page reuse...

Linux Distros Unpatched Vulnerability : CVE-2026-74648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: validate monitor transmit frame lengths rtwcfg80211monitorifxmitentry removes the radiotap header and then reads the 802.11 frame control...

Linux Distros Unpatched Vulnerability : CVE-2026-74614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b vsock/virtio: add support for device suspend/resume made the run flags transition from fals...

Linux Distros Unpatched Vulnerability : CVE-2026-74670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. ...

Linux Distros Unpatched Vulnerability : CVE-2026-74603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to...

Linux Distros Unpatched Vulnerability : CVE-2026-74588

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap- acked chunk onto another transport's transmitted list without...

Linux Distros Unpatched Vulnerability : CVE-2026-74669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it...