Linux Distros Unpatched Vulnerability : CVE-2026-72331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix VMA access race aie2populaterange and amdxdnaumaprelease access a saved VMA pointer that may have already been freed, leading to a potential...

Linux Distros Unpatched Vulnerability : CVE-2026-74335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix NULL pointer dereference in bpftaskfromvpid bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid:...

Linux Distros Unpatched Vulnerability : CVE-2026-72412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and...

Linux Distros Unpatched Vulnerability : CVE-2026-72363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio...

Linux Distros Unpatched Vulnerability : CVE-2026-72059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any ring...

Linux Distros Unpatched Vulnerability : CVE-2026-74433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed t...

Linux Distros Unpatched Vulnerability : CVE-2026-74346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug during a previous patch:...

Linux Distros Unpatched Vulnerability : CVE-2026-72176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/sysfs-schemes: put stats for schemeadddirs internal error damonsysfsschemeadddirs setup the triedregions directory after the stats directory setup is...

Linux Distros Unpatched Vulnerability : CVE-2026-72233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables...

Linux Distros Unpatched Vulnerability : CVE-2026-74288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fibrules: Don't dump dying fibrule in fibrulesdump. rockerrouterfibevent calls fibruleget during RCU dump. If the fibrule is dying, refcountinc will compla...

Linux Distros Unpatched Vulnerability : CVE-2026-72303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULENOTIFICATION payload length before reading bytes/channel data in control update...

Linux Distros Unpatched Vulnerability : CVE-2026-72249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the...

Linux Distros Unpatched Vulnerability : CVE-2026-74437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: uvcvideo: Fix deadlock if uvcstatusstop is called from asyncctrl.work If a UVC camera has an asynchronous control, uvcstatusstop may be called from...

Linux Distros Unpatched Vulnerability : CVE-2026-72361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/hwengine: Fix double-free of managed BO in error path The error path in hwengineinit explicitly frees a BO allocated with xemanagedbocreatepinmap via...

Linux Distros Unpatched Vulnerability : CVE-2026-72356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: Fix missing credit release on failure in cifsissueread Fix missing release of credits in the failure path in cifsissueread lest retrying the subreq just...

Linux Distros Unpatched Vulnerability : CVE-2026-74382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsbpf: prevent unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in clsbpfoffloadcmd. Reproducer on netdevsim: add a skip...

Linux Distros Unpatched Vulnerability : CVE-2026-72263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: topology: fix memory leak in sndsofloadtopology When the topology filename contains dummy and tplgcnt is 0, the function returns -EINVAL directly...

Linux Distros Unpatched Vulnerability : CVE-2026-72455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 apparmor: move check for aanull file to cover all cases intrdouced a...

Linux Distros Unpatched Vulnerability : CVE-2026-68474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it...

Linux Distros Unpatched Vulnerability : CVE-2026-68465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function...