PT-2026-72641

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cache ops-populate callback, and if cache operations include an exit callback, the error code from...

PT-2026-72620

In the Linux kernel, the following vulnerability has been resolved: tpm crb: Check ACPI COMPANION against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device match driver override, so platform drivers that rely on the...

PT-2026-72763

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is vm area hugepages find vm area can return NULL if the given address is not a valid vmalloc area. Check the return value before dereferencing it to avoid a kernel crash...

Linux Distros Unpatched Vulnerability : CVE-2026-74424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbcon: fix NULL pointer dereference for a console without vcdata fbconnewmodelist runs when a framebuffer's modelist changes. For each console mapped to it with...

PT-2026-72771

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf task from vpid bpf task from vpid looks up a task in the pid namespace of the current task, via find task by vpid: find task by vpidvpid find task by pid nsvpid, task active pid nscurrent...

PT-2026-72836

In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf set|remove dentry xattr for negative dentries bpf set dentry xattr and bpf remove dentry xattr BPF kfuncs attempt to lock the inode of the supplied dentry without checking if it is NULL. If a negative dentry...

PT-2026-72842

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan gro prepare receive. udp tunnel sock release could set sk-sk user data to NULL while vxlan gro prepare receive is running. Let's check if rcu dereference sk user data is NULL after skb...

Linux Distros Unpatched Vulnerability : CVE-2026-74342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 simpexattr: use per-sb cache, kernfsxattrset and kernfsxattrget compute the cac...

Linux Distros Unpatched Vulnerability : CVE-2026-74571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-74461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending...

Linux Distros Unpatched Vulnerability : CVE-2026-74491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local...

Linux Distros Unpatched Vulnerability : CVE-2026-74538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: lock sk in isoconnectind Accessing isopisk-conn requires locksock, which is not taken in the ev3 part of isoconnectind. It may also be NULL if...

Linux Distros Unpatched Vulnerability : CVE-2026-74442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver...

Linux Distros Unpatched Vulnerability : CVE-2026-74445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: reject DXBINDQUERY without a DX context vmwcmddxbindquery unconditionally dereferences swcontext-dxctxnode-ctx. Userspace can trigger a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-72254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftfib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base chain dereferences nftinpkt, NULL on the transmit...

Linux Distros Unpatched Vulnerability : CVE-2026-74552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after...

PT-2026-72656

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize re id before removal registration rpcrdma create id registers ep-re rn with the rpcrdma ib client before returning the new rdma cm id to rpcrdma ep create. However rpcrdma ep create currently stores that...

PT-2026-72515

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject invalid indirect BO handle in indirect CSD setup v3d get cpu indirect csd params looks up the indirect buffer object from a userspace-supplied handle but never checks the result. A bogus or stale handle makes drm...

PT-2026-72866

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpc input ackall accepts ACKALL packets without checking whether the call is in a state that can legitimately have outstanding transmit buffers. A forged ACKALL can therefore reach a new servic...

PT-2026-72286

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dm verity loadpin is bdev trusted if the device has no table...