PT-2026-72531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5e driver where a zero-sized buffer is allocated during the creation of HV VHCA stats. When mlx5e hv vhca stats create is called before mlx5e open, the...

PT-2026-72515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the v3d get cpu indirect csd params function fails to verify the result of a buffer object lookup performed via drm gem object lookup. When...

PT-2026-72557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the Minix file system implementation when calculating bitmap block counts. The function minix check superblock utilizes minix blocks needed, which performs...

PT-2026-72710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CXL driver where NULL endpoint decoder pointer holes can be left in the target array of an active auto-assembly region. This occurs when cxl cancel auto attach...

PT-2026-72778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when creating a cgroup directory under /sys/fs/cgroup on SELinux-enabled distributions. The issue arises because the LSM kernfs init...

PT-2026-72854

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Trace dma fence signaled, trace dma fence wait end and trace dma fence destroy can all currently dereference a null fence-ops pointer after it has been reset on fence...

PT-2026-72894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vmwgfx component where the vmw vkms init function can leave the vmw-crc workq variable as NULL. This occurs under two conditions: when vmw host get...

PT-2026-72924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ublk ctrl add dev function where the kernel fails to reset specific kernel-owned fields after copying ublsrv ctrl dev info from userspace into ub-dev info...

PT-2026-72897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the drm/vmwgfx component. The function vmw cmd dx bind query unconditionally dereferences sw context-dx ctx node-ctx. A user...

PT-2026-72283

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

PT-2026-72534

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLAND WMI CONTROL and an event device BITLAND WMI EVENT. During the probe phase,...

PT-2026-72699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the t7xx port ctrl tx function when it fails to verify the result of skb clone. The function clones each skb fragment before passing it to the port...

PT-2026-72695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the CIFS module during the unmounting process. When CIFS files are placed into the fileinfo put wq queue during an umount operation, the...

PT-2026-72612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the shared IRQ handler during the probe process of the msc313 RTC driver. The function msc313 rtc probe calls devm request irq using IRQF SHARED and...

PT-2026-72678

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw aes decrypt The null-pointer-guard was incorrect, returning FAIL on valid pointer. Invert the guard, so it returns FAIL on invalid pointer...

PT-2026-72547

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bo meminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

CVE-2026-72502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP as mssclamp, allowing the MSS to reach 65535. However, 0xFFFF is also...

CVE-2026-72104: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

CVE-2026-74426: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...

PT-2026-72862

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.246-syzkaller Description A NULL pointer dereference occurs in the afs get tree function. This happens because afs alloc sbi utilizes kzalloc for memory allocation; when ctx-dyn root is not null, the as-cell and...