Linux Distros Unpatched Vulnerability : CVE-2026-74526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix potential deadlock in mpi3mrfaultueventemit mpi3mrfaultueventemit runs from the fault watchdog and reset paths where host I/O may already be...

Linux Distros Unpatched Vulnerability : CVE-2026-72495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Avoid repeated requests to allocate WC pages Applications can request multiple WC pages for the same ucontext. As of now, only 1 WC page per uconte...

Linux Distros Unpatched Vulnerability : CVE-2026-74576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b mm/slab: avoid allocating slabobjext array from its own slab avoided...

PT-2026-72440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation failure in the netfilter module can cause a cloned nft pipapo match structure to enter an inconsistent state. This occurs when lookup tables are partially resized, bi...

PT-2026-72239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the octeontx2-af driver when the nix setup bpids function fails. The function allocates a BPID bitmap using rvu alloc bitmap, which relies on kcalloc. If subseque...

PT-2026-72556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double unlock occurs in the nomem d alloc error path. When the start creating function fails and returns -ENOMEM, the parent directory lo...

PT-2026-72504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the metadata open function. When kzalloc obj fails, metadata open returns NULL; however, the caller function era ctr only checks for errors using IS...

PT-2026-72645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor component where the unpack pdb function fails to correctly handle allocation failures when creating a missing ACCEPT2 table for older policy data. In such...

PT-2026-72810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid1 and raid10 components where error-path detection fails when relying on r1 bio in raid1 or r10 bio-read slot in raid10, as these may be NULL or -1 after a...

CVE-2026-72109: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5registernotifierblocks registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregiste...

PT-2026-72551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the state of the current folio is not correctly handled when an ENOMEM out of memory error occurs during writeback iteration. To ensure corre...

CVE-2026-72457: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

PT-2026-72673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the coresight platform where the coresight add out conn function increments the nr outconns counter before calling devm krealloc array and devm kmalloc, and the...

CVE-2026-72244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

PT-2026-72570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the ksmbd component. The parse dacl function attempts to limit the attacker-controlled Access Control Entry ACE count by comparing it with the number of...

PT-2026-73022

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfs rl realloc and ntfs rl realloc nofail...

SUSE CVE-2026-56860

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

EUVD-2026-36103

s2n-quic has excessive memory allocation...

GHSA-9Q54-F358-3FQF s2n-quic has excessive memory allocation

s2n-quic is a Rust implementation of the QUIC protocol. An unauthenticated user can attempt to exhaust server memory on an s2n-quic endpoint by sending crafted CRYPTO frames with high offsets. The buffer used for processing CRYPTO frames does not enforce a maximum size. In the worst case, a singl...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JSON plugin when handling JSON request bodies. An attacker can cause excessive memory consumption by sending a large JSON payload, potentially leading to service disruption for...