Linux Distros Unpatched Vulnerability : CVE-2026-72435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: fix order of kfreercu and rcuassignpointer Sashiko pointed out that kfreercu was called before rcuassignpointer in handling the comment...

Linux Distros Unpatched Vulnerability : CVE-2026-72319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskbpull we should ensure the inner IP...

Linux Distros Unpatched Vulnerability : CVE-2026-72195

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound attroff in UpdateResidentValue against dataoff In doaction's UpdateResidentValue case fslog.c:3307, lrh-attroff and lrh-redolen come from the...

Linux Distros Unpatched Vulnerability : CVE-2026-72270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: s3fb: fix potential memory leak in s3pciprobe In s3pciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in subsequent err...

Linux Distros Unpatched Vulnerability : CVE-2026-74355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the...

Linux Distros Unpatched Vulnerability : CVE-2026-74267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever codel drops packets during peek, it calls...

Debian dla-4745 : ata-modules-6.12.100+deb12-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4745 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4745-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-74362

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext2: fix ignored return value of genericwritesync Fix ext2diowriteiter to propagate the error returned by genericwritesync instead of silently discarding it,...

Linux Distros Unpatched Vulnerability : CVE-2026-72022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llc: fix SAP refcount leak in llcuiautobind llcuiautobind opens a SAP after choosing a dynamic LSAP. llcsapopen returns a reference owned by the caller, and...

Linux Distros Unpatched Vulnerability : CVE-2026-72194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: add depth limit to indxfindbuffer to prevent stack overflow indxfindbuffer recursively descends the B+ tree index with no depth limit. A crafted NTFS...

Linux Distros Unpatched Vulnerability : CVE-2026-72296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes...

Linux Distros Unpatched Vulnerability : CVE-2026-74404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Fix snpfilterreservedmemregions off-by-one Sashiko notes: regarding the bounds check in snpfilterreservedmemregions called via walkiomemresdesc:...

Linux Distros Unpatched Vulnerability : CVE-2026-72450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrmselectormatch due to AFUNSPEC selector with large prefixl...

Linux Distros Unpatched Vulnerability : CVE-2026-72054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They...

Linux Distros Unpatched Vulnerability : CVE-2026-72433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftmetabridge: fix NFTMETABRIIIFPVID stack leak This needs to test for nonzero retval. CVE-2026-72433 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-72502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP a...

Linux Distros Unpatched Vulnerability : CVE-2026-72421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled but no rule is added, fiblookup performs route lookup directly ...

Linux Distros Unpatched Vulnerability : CVE-2026-74287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate embedded address parameter length sctpverifyasconf and sctpverifyparam only validate ADDIP, DELIP, and SETPRIMARY parameters against a fixed...

Linux Distros Unpatched Vulnerability : CVE-2026-72016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp...

Linux Distros Unpatched Vulnerability : CVE-2026-72136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: xfrminterface: require CAPNETADMIN in the device netns for changelink xfrmichangelink operates on at most two netns, devnetdev and the interface link netn...