PT-2026-72448

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pm runtime get sync without checking the return value...

PT-2026-72497

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in trace remote alloc buffer error path If page allocation fails in trace remote alloc buffer, desc-nr cpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rb desc...

PT-2026-72634

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: reject stream disable with no active interface handle uaudio stream req resolves an interface index with info idx from ifnum, which returns -EINVAL when no interface matches. The enable branch and the...

SUSE CVE-2026-14668

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...

PT-2026-72353

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nand select target' 'cs' here must be in range 0:nanddev ntargets...

PT-2026-72266

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use freefirmware to ensure the firmware is always released...

PT-2026-72632

In the Linux kernel, the following vulnerability has been resolved: flow dissector: check device type before reading ETH ADDRS skb flow dissect unconditionally reads 12 bytes from eth hdrskb when FLOW DISSECTOR KEY ETH ADDRS is requested. This assumes the skb has a valid Ethernet header at mac...

PT-2026-72440

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft set pipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nft pipapo match can enter a bad state: - some fields can have their lookup tables resized while others did not - bit...

PT-2026-72545

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm struct in in uprobe trampoline In the unregister path we use in uprobe trampoline check with current-mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process...

PT-2026-72556

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomem d alloc error path When start creating fails and returns -ENOMEM, it has already released the parent directory lock in start dirop: static struct dentry start dirop... ... inode lock...

PT-2026-72211

In the Linux kernel, the following vulnerability has been resolved: llc: fix SAP refcount leak in llc ui autobind llc ui autobind opens a SAP after choosing a dynamic LSAP. llc sap open returns a reference owned by the caller, and llc sap add socket takes a second reference for the socket's...

PT-2026-73019

In the Linux kernel, the following vulnerability has been resolved: keys: fix out-of-bounds read in keyring get key chunk For description-level chunks keyring get key chunk advances the read pointer by level sizeoflong past the inline prefix but only bounds-checks the prefix, so a long enough key...

PT-2026-72974

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in close file table ids A ksmbd file can remain alive after logical close while another session holds a temporary reference obtained through ksmbd lookup fd inode. ksmbd close fd currently marks the file...

Linux Distros Unpatched Vulnerability : CVE-2026-72086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path scsibackdeviceaction obtains a command tag in scsibackgetpendreq and submits a...

Linux Distros Unpatched Vulnerability : CVE-2026-72383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix addrwqtimer race in sctpfreeaddrwq sctpfreeaddrwq previously removed addrwqtimer using timerdelete while holding addrwqlock. However, timerdelete does...

Linux Distros Unpatched Vulnerability : CVE-2026-74507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: HIDP: validate numbered report payloads When hidpgetrawreport waits for a numbered report, hidpprocessdata compares the expected report number with...

Linux Distros Unpatched Vulnerability : CVE-2026-74554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing i...

Linux Distros Unpatched Vulnerability : CVE-2026-74379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dax/kmem: account for partial discontiguous resource upon removal When devdaxkmemprobe partially succeeds at least one range is mapped but a subsequent range...

RockyLinux 8 : bind (RLSA-2026:54654)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54654 advisory. bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 bind: bind9: Potential memory usage beyond configured limits...

Linux Distros Unpatched Vulnerability : CVE-2026-72023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure,...