CVE-2026-72168 mtd: maps: vmu-flash: fix fault in unaligned fixup

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

CVE-2026-72105

The CVE-2026-72105 entry concerns the Linux kernel dm-log component, where a bitset_size overflow on 32‑bit architectures could occur during region_count handling. The root cause is a miscalculation of bitset_size (size_t) when computing the bitmap memory based on region_count, which could wrap t...

EUVD-2026-59016

In the Linux kernel, the following vulnerability has been resolved: net: ixp4xxhss: fix duplicate HDLC netdev allocation ixp4xxhssprobe allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with registerhdlcdevice. The second one is stored in port-netdev and lat...

CVE-2026-72005 wifi: rt2x00: avoid full teardown before work setup in probe

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

Linux Distros Unpatched Vulnerability : CVE-2026-74526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix potential deadlock in mpi3mrfaultueventemit mpi3mrfaultueventemit runs from the fault watchdog and reset paths where host I/O may already be...

PT-2026-73022

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfs rl realloc and ntfs rl realloc nofail...

PT-2026-72978

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr fault uevent emit mpi3mr fault uevent emit runs from the fault watchdog and reset paths where host I/O may already be blocked. GFP KERNEL allocations here, both the local kzalloc obj...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

Linux Distros Unpatched Vulnerability : CVE-2026-74576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b mm/slab: avoid allocating slabobjext array from its own slab avoided...

PT-2026-72673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the coresight platform where the coresight add out conn function increments the nr outconns counter before calling devm krealloc array and devm kmalloc, and the...

CVE-2026-72244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

PT-2026-72239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the octeontx2-af driver when the nix setup bpids function fails. The function allocates a BPID bitmap using rvu alloc bitmap, which relies on kcalloc. If subseque...

PT-2026-72556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double unlock occurs in the nomem d alloc error path. When the start creating function fails and returns -ENOMEM, the parent directory lo...

PT-2026-72551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the state of the current folio is not correctly handled when an ENOMEM out of memory error occurs during writeback iteration. To ensure corre...

CVE-2026-72457: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

PT-2026-72504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the metadata open function. When kzalloc obj fails, metadata open returns NULL; however, the caller function era ctr only checks for errors using IS...

PT-2026-72645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor component where the unpack pdb function fails to correctly handle allocation failures when creating a missing ACCEPT2 table for older policy data. In such...

PT-2026-72810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid1 and raid10 components where error-path detection fails when relying on r1 bio in raid1 or r10 bio-read slot in raid10, as these may be NULL or -1 after a...

CVE-2026-72109: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5registernotifierblocks registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregiste...

Linux Distros Unpatched Vulnerability : CVE-2026-72496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Proper rollback if the ioremap fails bnxtqpliballocdpi returns success even if ioremap fails. Add the proper rollback when the ioremap fails and...