Linux Distros Unpatched Vulnerability : CVE-2026-72198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: reject non-resident records for resident-only attributes The shared lookup-time attribute validator rejects non-resident $FILENAME and $VOLUMENAME records...

Linux Distros Unpatched Vulnerability : CVE-2026-72341

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix publication race for priv-channelstats mlx5echannelstatsalloc publishes a new entry to priv-channelstats and then increments priv-statsnch as a...

Linux Distros Unpatched Vulnerability : CVE-2026-74483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: don't leak the user namespace when the mount fails bmgettree takes a reference to the user namespace and hands it to gettreekeyed as the sget key...

Linux Distros Unpatched Vulnerability : CVE-2026-72485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: platform: defer connection counter increment until alloc succeeds coresightaddoutconn increments nroutconns before calling devmkreallocarray and agai...

Linux Distros Unpatched Vulnerability : CVE-2026-72334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: fix malformed ISOEND/CONT handling Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT, ISOEND packets. We currently reject...

Linux Distros Unpatched Vulnerability : CVE-2026-74514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid which increments the reference count of...

PT-2026-72407

In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm file leak when nlm do fopen fails A client can repeatedly drive nlm do fopen failures by presenting file handles that the underlying export rejects. After kzalloc obj succeeds in nlm lookup file, the freshly...

PT-2026-72655

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwr wp create during connect frwr wp create creates the singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. Its failure paths return a negative errno and leave...

PT-2026-72247

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ixp4xx hss probe function where two HDLC netdevs are allocated instead of one. The first allocation is stored in ndev, initialized, and registered via register hdl...

PT-2026-72715

In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sg cleanup error path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

PT-2026-72558

In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bio iov iter get pages or the bounce helper succeeds but builds a short bio, the REQ ATOMIC size check rejects it before submission. The old error path only dropped the bio...

PT-2026-73012

In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk drop skb for AF XDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq to be published is invalid. Actually the severer thing is the who...

PT-2026-72545

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm struct in in uprobe trampoline In the unregister path we use in uprobe trampoline check with current-mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process...

PT-2026-72400

In the Linux kernel, the following vulnerability has been resolved: mm/memory hotplug: fix incorrect altmap passing in error path In create altmaps and memory blocks, when arch add memory succeeds with memmap on memory enabled, the vmemmap pages are allocated from params.altmap. If create memory...

PT-2026-72512

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq alloc domain generic chips allocates generic chip data that must be freed via irq domain remove generic chips. The devres action mvebu gpio remove irq domain only called irq domain...

PT-2026-72737

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc mtk intr urb error path When btmtk isopkt pad fails, the previously allocated URB is not freed, leaking the urb structure. Add usb free urb before returning the error...

PT-2026-72412

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt init error paths The arenas allocated by discover arenas or create arenas are not freed on some error paths in btt init. This leaks memory when BTT initialization fails. Call free arenas from the...

PT-2026-72291

In the Linux kernel, the following vulnerability has been resolved: dm early create: fix freeing used table on dm resume failure If dm resume fails, the kernel attempts to free table with dm table destroy, but the table was already instantiated with dm swap table. This commit skips the call to dm...

PT-2026-72296

In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zero start sector dm-era tracks writes in target-relative blocks, but era map calculates the writeset block before applying the target offset. Tables with a non-zero start sector ca...

PT-2026-72547

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bo meminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...