PT-2026-72763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the is vm area hugepages function. This occurs because the find vm area function can return NULL when the provided address is not a valid vmalloc are...

CVE-2026-72163: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the journal aborts during DIO completion. The crash is a general...

PT-2026-72823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA MIDI sequence component where the event process midi function borrows msynth-output rfile.output and passes the substream to dump midi and snd rawmidi kernel...

PT-2026-72836

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the BPF kfuncs bpf set dentry xattr and bpf remove dentry xattr when they attempt to lock the inode of a supplied dentry without verifying if it is...

PT-2026-72441

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter SIP helper where the system fails to validate skb dst before accessing it. This occurs because tc ingress and openvswitch do not guarantee that routing...

PT-2026-72530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A registration race condition exists in the net/mlx5e module. The function mlx5e hv vhca stats create uses mlx5 hv vhca agent create to register a stats agent. This helper publishes the...

PT-2026-72607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the nf nat component may use an invalid nat net pointer following a failed nf nat init call. This can lead to an invalid memory access withi...

PT-2026-72442

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the netfilter nft fib component when a fib expression is used in a netdev egress base chain. This happens because the nft fib validate function...

PT-2026-72504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the metadata open function. When kzalloc obj fails, metadata open returns NULL; however, the caller function era ctr only checks for errors using IS...

PT-2026-73004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the lm90 driver when userspace reads sysfs attributes before driver registration is complete. This happens immediately after the devm hwmon device...

PT-2026-72655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rpcrdma xprt connect function ignores the return value of frwr wp create. The frwr wp create function is responsible for creating a singleto...

PT-2026-72531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5e driver where a zero-sized buffer is allocated during the creation of HV VHCA stats. When mlx5e hv vhca stats create is called before mlx5e open, the...

PT-2026-72515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the v3d get cpu indirect csd params function fails to verify the result of a buffer object lookup performed via drm gem object lookup. When...

PT-2026-72557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the Minix file system implementation when calculating bitmap block counts. The function minix check superblock utilizes minix blocks needed, which performs...

PT-2026-72710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CXL driver where NULL endpoint decoder pointer holes can be left in the target array of an active auto-assembly region. This occurs when cxl cancel auto attach...

PT-2026-72778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when creating a cgroup directory under /sys/fs/cgroup on SELinux-enabled distributions. The issue arises because the LSM kernfs init...

PT-2026-72854

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Trace dma fence signaled, trace dma fence wait end and trace dma fence destroy can all currently dereference a null fence-ops pointer after it has been reset on fence...

PT-2026-72894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vmwgfx component where the vmw vkms init function can leave the vmw-crc workq variable as NULL. This occurs under two conditions: when vmw host get...

PT-2026-72924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ublk ctrl add dev function where the kernel fails to reset specific kernel-owned fields after copying ublsrv ctrl dev info from userspace into ub-dev info...

PT-2026-72897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the drm/vmwgfx component. The function vmw cmd dx bind query unconditionally dereferences sw context-dx ctx node-ctx. A user...