CVE-2026-72171 mtd: slram: remove failed entries from the device list

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtddeviceregister fails, the partial...

CVE-2026-72169

The CVE-2026-72169 entry concerns the Linux kernel. A vulnerability arose from not always aligning scratch sizes to CMA_MIN_ALIGNMENT_BYTES when using scratch_scale, potentially causing a released pageblock to be only partially scratch. The fix, as documented, is to perform the rounding up for bo...

CVE-2026-72169 kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

CVE-2026-72155

CVE-2026-72155 concerns the Linux kernel driver mtd: spi-nor: swp, where unlocking the first- or early-blocks can fail when attempting to unlock only currently locked blocks. The root cause is that when both sides can achieve the same result (unlock everything), the lock_len logic misbehaved beca...

EUVD-2026-59014

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

CVE-2026-72032 net/mlx5: HWS, fix matcher leak on resize target setup failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

CVE-2026-72027

CVE-2026-72027 affects the Linux kernel in the memory management compaction path. The vulnerability stems from improper handling of the return value of free_pages_prepare() within compaction_free(); when free_pages_prepare() fails, compaction_free() may still add pages back into cc->freepages,...

CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

PT-2026-72764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd component where page content destruction occurs out of order during the detachment from dmabuf. This can lead to a situation where a mutex remains in use...

PT-2026-72565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS component where the afs apply status function unconditionally calls mapping set release always for symlinks and mountpoints. While regular AFS files use afs fi...

PT-2026-72357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kho component where scratch sizes specified via the command line are not rounded up to CMA MIN ALIGNMENT BYTES. While this rounding occurs when using scratch scale...

PT-2026-72545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 uprobes implementation where the in uprobe trampoline function incorrectly uses current-mm for VMA Virtual Memory Area lookup during the unregister path. This...

PT-2026-72516

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lifetime race condition exists in the accel/amdxdna component. The function amdxdna umap release invokes the blocking mmu interval notifier remove before the object is removed from...

PT-2026-72401

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatch occurs in the hugetlb cgroup charge and uncharge process. In the alloc hugetlb folio function, a single h cg pointer is used for both reserved rsvd and non-reserved hugetlb...

PT-2026-72363

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Multiple issues were identified in the Linux kernel related to memory management and userfaultfd. One critical issue involves a protection-update race in the make uffd wp huge pte...

PT-2026-72232

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture when the hardware page table walker PTW is enabled. The CPU may set the PAGE DIRTY bit directly in the page table entry during a write TLB...

PT-2026-72291

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm early create function where the kernel incorrectly attempts to free a table using the dm table destroy function if dm resume fails. This occurs because the tabl...

CVE-2026-74347: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nfcttimeout which is used by ct extension to set the custom ct timeout policy, this tells us that the ct timeout is being used...

CVE-2026-72281: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: account pKVM reclaim against the VM mm Protected guest faults charge long term pins to the VM's mm. Teardown can run later from file release, where current-mm may be unrelated. Drop the charge from kvm-mm instead...

CVE-2026-72213: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...