CVE-2026-72234

The CVE relates to the Linux kernel’s batman-adv code. A use-after-free could occur when pskb_may_pull() reallocates the buffer behind skb, and pointers (notably the unicast_packet pointer) are not reassigned, after skb data is accessed. The issue was fixed by ensuring reassignment for affected p...

CVE-2026-72230 batman-adv: frag: free unfragmentable packet

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

CVE-2026-72065 net: mana: Validate the packet length reported by the NIC

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

CVE-2026-72064

CVE-2026-72064 relates to the Linux kernel net: mana RX path. When frag_count > 1, RX buffers are allocated from page pool fragments and remain DMA mapped; the RX completion path omits dma_unmap_single(), so the implicit CPU sync is not performed before passing data to the networking stack. Th...

CVE-2026-72065 net: mana: Validate the packet length reported by the NIC

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

EUVD-2026-59023

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

CVE-2026-72065

The CVE-2026-72065 issue affects the Linux kernel networking path for mana devices: it fixes a vulnerability where the packet length reported by the NIC RX CQE could be unchecked before skb processing. The underlying problem is trusting CQE-reported lengths from the NIC and passing them to skb ha...

CVE-2026-72021

Summary: The CVE-2026-72021 issue affects the Linux kernel’s IPVS SCTP state lookup. The kernel incorrectly read the SCTP chunk header using a wrong offset for IPv6 when extension headers were present, causing misclassification of handshake steps (e.g., INIT1 vs ESTABLISHED) and incorrect managem...

Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet

...

PT-2026-72702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch dualpi2 scheduler where the function qdisc tree reduce backlog is called during a peek operation before the qlen variable is restored. If qlen drops to zero...

PT-2026-72420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A local user with eBPF TC hook access can attach a tc filter that truncates a packet and redirects it to a batadv interface. The batadv interface tx function assumes that at least ETH HL...

CVE-2026-74559: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xskbuildskb Fix generic xmit path multi-buffer logic when packets are either too big count of descriptors exceed MAXSKBFRAGS or an invalid descriptor is included in fragmented packe...

Linux Distros Unpatched Vulnerability : CVE-2026-74492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During...

Linux Distros Unpatched Vulnerability : CVE-2026-72065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is...

PT-2026-72944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component where mtype resize copies comment pointers using memcpy instead of copying the actual comment objects. This creates a race condition duri...

CVE-2026-72230: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

CVE-2026-74430: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpcinputackall accepts ACKALL packets without checking whether the call is in a state that can legitimately have outstanding transmit buffers. A forged ACKALL can therefore reach a new service...

PT-2026-72538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter xt u32 module where the u32 match it function executes shift operands provided by a rule on a 32-bit value. A malformed u32 rule can specify a shift coun...

PT-2026-72539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic UDP Encapsulation GUE implementation where the guehdr priv flags len function returns 0 even when the GUE PFLAG REMCSUM flag is set. This allows packets...

CVE-2026-72350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtu32: reject invalid shift counts u32matchit executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during...