Linux Distros Unpatched Vulnerability : CVE-2026-74370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102109 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: Release atmdevmutex after removing procfs in atmdevderegister. syzbot reported a warning bel...

avicii-ghostlock

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099719 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependenc...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100337 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100741 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099896 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100127 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are...

SUSE CVE-2026-74450

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpudpmgetpptable returns a pointer to a driver-owned power table after dropping adev-pm.mutex. The sysfs path then copies from that pointer. A concurrent pptable write can replace and fre...

SUSE CVE-2026-74511

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

AZL-96096 CVE-2026-74523 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

UBUNTU-CVE-2026-74523

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

CVE-2026-74523

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

CVE-2026-74561

Summary: CVE-2026-74561 is a Linux kernel vulnerability where nh_rt_cache_flush walks an f6i_list without proper locking, racing with unlocked IPv6 route add/delete operations and freeing fib6_info. The fix migrates the sernum update to a broader netns scope by using rt_genid_bump_ipv6() instead ...

CVE-2026-74523

Summary: CVE-2026-74523 affects the Linux kernel qede driver with VXLAN/GENEVE tunnels. A TX timeout can cause recovery deadlocks in the driver’s mutex, freezing rtnetlink control for the node. What’s affected: The qede UDP tunnel synchronization flow during recovery paths, where recovery nested ...

CVE-2026-74523 qede: sync udp_tunnel ports outside qede_lock in the recovery path

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

CVE-2026-74523 qede: sync udp_tunnel ports outside qede_lock in the recovery path

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

EUVD-2026-59656

In the Linux kernel, the following vulnerability has been resolved: i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C adapter lock, which triggers when an I2C-controlled clock generator...

CVE-2026-74463

The CVE-2026-74463 issue concerns the Linux kernel: i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock. The root cause is that during an I2C clock frequency change, the Common Clock Framework (CCF) can deadlock with the I2C adapter lock when clk_get_rate() is invoked...

CVE-2026-74450 drm/amd/pm: fix pptable use-after-free

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpudpmgetpptable returns a pointer to a driver-owned power table after dropping adev-pm.mutex. The sysfs path then copies from that pointer. A concurrent pptable write can replace and fre...