PT-2026-72293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The pcache target parses optional arguments as name/value pairs. When a table provides a recognized option name, such as cache mode, without a corresponding value, the parse cache opts...

CVE-2026-74477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobeexpire Forking a task that has a pending uretprobe can oops the kernel with a NULL pointer dereference in the clone path: BUG: kernel NULL pointer dereference, address:...

PT-2026-72871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where rxrpc recvmsg data calls rxrpc verify data when rxrpc call.rx dec buffer is unallocated, assuming it will be allocated upon a successful return. However, rxrpc veri...

PT-2026-72550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the xe pt zap ptes entry function. The page-table walk framework may pass a NULL child pointer for unpopulated entries. The function calls container...

PT-2026-72445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the graph callback function. This occurs when q6apm free fragments frees rx data.buf or tx data.buf and sets them to NULL under graph-lock. A race...

PT-2026-72865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc component where the rxrpc receiving reply function fails to properly handle the reception of a reply DATA packet before any request DATA packets have been se...

PT-2026-72580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the IPv6 forwarding information base fib6 during multi-batch dumps. The inet6 dump fib function saves progress using a positional index in cb-args1. ...

CVE-2026-72013: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where image-segmenti.buf might be NULL and copied unchecked. The NULL buf comes from...

PT-2026-72771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the bpf task from vpid function. This happens when cgroup skb programs run in softirq and interrupt a task that is currently executing do exit. If th...

PT-2026-72202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the riscv architecture within the machine kexec prepare function. This happens because image-segmenti.buf may be NULL and is copied without validatio...

CVE-2026-72257: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: fix NULL pointer dereference in graphcallback When q6apmfreefragments is called it frees rxdata.buf/txdata.buf and sets them to NULL under graph-lock. A late DSP buffer-done response can race with this:...

CVE-2026-72254: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base chain dereferences nftinpkt, NULL on the transmit path, causing a NULL pointer dereference at eval. nftfibvalidate masks...

CVE-2026-72385: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

CVE-2026-72362: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

CVE-2026-72097: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dmverityloadpinisbdevtrusted if the device has no table...

CVE-2026-72094: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

CVE-2026-72176: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for schemeadddirs internal error damonsysfsschemeadddirs setup the triedregions directory after the stats directory setup is completed. When the triedregions directory setup is failed, the setup...

CVE-2026-72034: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capablewrtmount The recent fhandle RCU fix moved the mount namespace capability check into capablewrtmount, so a non-NULL mntnamespace survives the nscapable dereference. The helper still assume...

CVE-2026-72468: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize reid before removal registration rpcrdmacreateid registers ep-rern with the rpcrdma ibclient before returning the new rdmacmid to rpcrdmaepcreate. However rpcrdmaepcreate currently stores that pointer in...

CVE-2026-74265: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...