CVE-2026-72253 netfilter: nf_conntrack_sip: validate skb_dst() before accessing it

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relies o...

CVE-2026-72253

Summary (CVE-2026-72253) : In the Linux kernel, the netfilter nf_conntrack_sip path is fixed to validate skb_dst() before use. The SIP helper relies on skb_dst() being present when sip_external_media is enabled, but tc ingress and Open vSwitch may not guarantee routing information, so the toggle ...

EUVD-2026-59141

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and selinuxsocketconnecthelper. However, when the hook is invoked from the...

CVE-2026-72242 selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and selinuxsocketconnecthelper. However, when the hook is invoked from the...

CVE-2026-72163

The vulnerability CVE-2026-72163 affects the Linux kernel OCFS2 journaling path. The issue arises in ocfs2_assure_trans_credits: when a journal aborts during DIO completion, a NULL h_transaction dereference can occur because the handle’s aborted state isn’t checked before reading remaining credit...

CVE-2026-72163 ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the journal aborts during DIO completion. The crash is a general...

CVE-2026-72163 ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the journal aborts during DIO completion. The crash is a general...

EUVD-2026-58921

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the journal aborts during DIO completion. The crash is a general...

CVE-2026-72161 ocfs2: add journal NULL check in ocfs2_checkpoint_inode()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2evictinode - ocfs2clearinode -...

CVE-2026-72161

The CVE describes a NULL dereference in OCFS2 during inode eviction after unmount, caused by osb->journal being freed but later dereferenced in ocfs2_checkpoint_inode(). The fix adds a NULL check for osb->journal in ocfs2_checkpoint_inode(), so if the journal is NULL (already flushed/destro...

CVE-2026-72161 ocfs2: add journal NULL check in ocfs2_checkpoint_inode()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2evictinode - ocfs2clearinode -...

EUVD-2026-58919

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2evictinode - ocfs2clearinode -...

CVE-2026-72147 dmaengine: dw-edma-pcie: Reject devices without driver data

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

CVE-2026-72147 dmaengine: dw-edma-pcie: Reject devices without driver data

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

CVE-2026-72147

The CVE-2026-72147 issue affects the Linux kernel’s dmaengine dw-edma-pcie driver. In dw_edma_pcie_probe, the PCI device ID driver_data is treated as the controller layout template and copied unconditionally. A device bound dynamically via sysfs can match the driver without that data, leading to ...

EUVD-2026-58905

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

CVE-2026-72136

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrminterface: require CAPNETADMIN in the device netns for changelink xfrmichangelink operates on at most two netns, devnetdev and the interface link netns xi-net. They differ once the device is created in or moved to a net...

CVE-2026-72125

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex. During device unregistration the device is unlisted from the ifindex...

CVE-2026-72104

The CVE-2026-72104 entry concerns the Linux kernel component dm-pcache (pcache target). The vulnerability arises when optional arguments are parsed as name/value pairs and a table advertises an option (e.g., cache_mode) but provides only the option name; after consuming the name, the parser decre...

CVE-2026-72104 dm-pcache: reject option groups without values

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...