CVE-2026-74445: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: reject DXBINDQUERY without a DX context vmwcmddxbindquery unconditionally dereferences swcontext-dxctxnode-ctx. Userspace can trigger a NULL pointer dereference from any render-node fd by submitting an execbuf with...

CVE-2026-74263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned-len, so an skbclone failure results in a NULL pointer...

CVE-2026-74403: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass it directly to pageaddress? On architectures without HASHEDPAGEVIRTUA...

CVE-2026-74477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobeexpire Forking a task that has a pending uretprobe can oops the kernel with a NULL pointer dereference in the clone path: BUG: kernel NULL pointer dereference, address:...

PT-2026-72646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the AppArmor module within the unpack pdb function. This happens because the pdb-dfa variable can be NULL if the unpack dfa function fails, leading t...

CVE-2026-72458: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpackpdb pdb-dfa could be NULL if unpackdfa fails, causing a NULL pointer dereference...

PT-2026-72866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of ACKALL packets within the rxrpc module. The function rxrpc input ackall accepts ACKALL packets without verifying if the call is in a state that can...

PT-2026-72758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in the mt7996 mac write txwi 80211 function. This happens when mac80211 passes info-control.vif as NULL for injected frames, such as those sent via...

PT-2026-72281

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdxdna cmd submit function where it unconditionally calls xdna-dev info-ops-cmd submit. While aie2 dev ops defines this callback, aie4 vf ops the AIE4 SR-IOV...

PT-2026-73023

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the btrfs module when mounting with the rescue=ibadroots option after the block group tree root or the raid stripe tree root has been corrupted. This...

CVE-2026-74327: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in isvmareahugepages findvmarea can return NULL if the given address is not a valid vmalloc area. Check the return value before dereferencing it to avoid a kernel crash...

CVE-2026-74322: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996macwritetxwi80211 For injected frames e.g. via radiotap, mac80211 can pass info-control.vif = NULL, as explicitly noted in struct ieee80211txinfo. Check vif point...

Linux Distros Unpatched Vulnerability : CVE-2026-72147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and...

Linux Distros Unpatched Vulnerability : CVE-2026-74424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbcon: fix NULL pointer dereference for a console without vcdata fbconnewmodelist runs when a framebuffer's modelist changes. For each console mapped to it with...

Linux Distros Unpatched Vulnerability : CVE-2026-72373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified...

Linux Distros Unpatched Vulnerability : CVE-2026-72253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems...

PT-2026-72862

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.246-syzkaller Description A NULL pointer dereference occurs in the afs get tree function. This happens because afs alloc sbi utilizes kzalloc for memory allocation; when ctx-dyn root is not null, the as-cell and...

Linux Distros Unpatched Vulnerability : CVE-2026-74461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending...

Linux Distros Unpatched Vulnerability : CVE-2026-74552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after...

Linux Distros Unpatched Vulnerability : CVE-2026-72254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftfib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base chain dereferences nftinpkt, NULL on the transmit...