Linux Distros Unpatched Vulnerability : CVE-2026-74526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix potential deadlock in mpi3mrfaultueventemit mpi3mrfaultueventemit runs from the fault watchdog and reset paths where host I/O may already be...

Linux Distros Unpatched Vulnerability : CVE-2026-74484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the...

Linux Distros Unpatched Vulnerability : CVE-2026-74314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That mak...

Linux Distros Unpatched Vulnerability : CVE-2026-72208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfsealookup and ntfslistxattr, this...

Linux Distros Unpatched Vulnerability : CVE-2026-72252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftsetpipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nftpipapomatch can enter a bad state: - some field...

Linux Distros Unpatched Vulnerability : CVE-2026-74464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix skb leak on flow key update failure during ct ovsctexecute always steals or frees the skb on failure while ovsflowkeyupdate does not. So, ...

Linux Distros Unpatched Vulnerability : CVE-2026-74324

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7925: validate skb length in testmode query In mt7925tmquery, the response skb from mt76mcusendandgetmsg is used in a memcpy without validating i...

Linux Distros Unpatched Vulnerability : CVE-2026-74350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate fast symlink target during inode read ocfs2validateinodeblock already rejects several inconsistent self-contained dinodes before they are expose...

Linux Distros Unpatched Vulnerability : CVE-2026-74576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b mm/slab: avoid allocating slabobjext array from its own slab avoided...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

Linux Distros Unpatched Vulnerability : CVE-2026-72150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in...

Linux Distros Unpatched Vulnerability : CVE-2026-68459

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix potential deadlock in gcmerge path of f2fsbalancefs When we mount device w/ gcmerge mount option, we may suffer below potential deadlock: Kworker GC...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

PT-2026-72461

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb probe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fb get options is expected to be freed by the caller, but the...

PT-2026-72458

In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3 pci probe In s3 pci probe, the memory allocated for modelist using fb videomode to modelist is not freed in subsequent error paths. Fix that by calling fb destroy modelist...

PT-2026-72644

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure get current exe path takes both an exe file reference and a path reference before resolving the path name. If aa path name failed, it returned immediately and leaked both...

PT-2026-72833

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5 ib alloc transport domain allocates a transport domain and then may fail in mlx5 ib enable lb. In that case, the allocated TD is leaked. Fix this by...

OPENSUSE-SU-2026:11515-1 ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-72214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/monwriter component where the system fails to verify if the data length remains consistent when data buffers are reused, such as for interval sample records. ...

PT-2026-72416

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary if leak on failed linearization If the skb has a frag list, it must be linearized before it can be split using skb split. But when this step failed, it must not only free the skb but also take care o...