CVE-2026-72502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP as mssclamp, allowing the MSS to reach 65535. However, 0xFFFF is also...

CVE-2026-72104: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

CVE-2026-74426: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...

PT-2026-72634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio qcom component where the handle uaudio stream req function fails to properly validate the interface index returned by info idx from ifnum during a...

PT-2026-72197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the mediatek power domain driver. The driver unconditionally attempts to perform cleanup for DIRECT CTL domains when a probe fails for HW VOTER...

PT-2026-72802

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the ath12k wifi driver. When ieee80211 set active links calls ieee80211 link use channel and a channel validation fails, the function drv assign vif...

CVE-2026-72091: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

PT-2026-72565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS component where the afs apply status function unconditionally calls mapping set release always for symlinks and mountpoints. While regular AFS files use afs fi...

CVE-2026-72453: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

PT-2026-72529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A publication race exists in the net/mlx5e module. The function mlx5e channel stats alloc updates the priv-channel stats array and increments the priv-stats nch variable without using...

PT-2026-72843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel affecting PCI/MHI-based devices. A kernel crash can occur during a reboot if it overlaps with WLAN firmware crash recovery, known as Subsystem...

PT-2026-72913

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free or NULL pointer dereference occurs in the i2c imx driver. In the i2c imx unreg slave function, the slave pointer is set to NULL after interrupts are disabled. If a pendi...

CVE-2026-74445: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: reject DXBINDQUERY without a DX context vmwcmddxbindquery unconditionally dereferences swcontext-dxctxnode-ctx. Userspace can trigger a NULL pointer dereference from any render-node fd by submitting an execbuf with...

CVE-2026-74263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned-len, so an skbclone failure results in a NULL pointer...

CVE-2026-74403: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass it directly to pageaddress? On architectures without HASHEDPAGEVIRTUA...

CVE-2026-74477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobeexpire Forking a task that has a pending uretprobe can oops the kernel with a NULL pointer dereference in the clone path: BUG: kernel NULL pointer dereference, address:...

PT-2026-72591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ALSA FCP component when processing a malformed USB device. The fcp find fc interface function selects the first vendor-specific interface and...

PT-2026-72646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the AppArmor module within the unpack pdb function. This happens because the pdb-dfa variable can be NULL if the unpack dfa function fails, leading t...

CVE-2026-72458: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpackpdb pdb-dfa could be NULL if unpackdfa fails, causing a NULL pointer dereference...

PT-2026-72866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of ACKALL packets within the rxrpc module. The function rxrpc input ackall accepts ACKALL packets without verifying if the call is in a state that can...