CVE-2026-72021

Summary: The CVE-2026-72021 issue affects the Linux kernel’s IPVS SCTP state lookup. The kernel incorrectly read the SCTP chunk header using a wrong offset for IPv6 when extension headers were present, causing misclassification of handshake steps (e.g., INIT1 vs ESTABLISHED) and incorrect managem...

Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet

...

PT-2026-72702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch dualpi2 scheduler where the function qdisc tree reduce backlog is called during a peek operation before the qlen variable is restored. If qlen drops to zero...

PT-2026-72420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A local user with eBPF TC hook access can attach a tc filter that truncates a packet and redirects it to a batadv interface. The batadv interface tx function assumes that at least ETH HL...

CVE-2026-74559: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xskbuildskb Fix generic xmit path multi-buffer logic when packets are either too big count of descriptors exceed MAXSKBFRAGS or an invalid descriptor is included in fragmented packe...

Linux Distros Unpatched Vulnerability : CVE-2026-74492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During...

Linux Distros Unpatched Vulnerability : CVE-2026-72347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: xtconnmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user- controlled shift parameters and applies them to 32-bit ma...

Linux Distros Unpatched Vulnerability : CVE-2026-72065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is...

PT-2026-72539

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Generic UDP Encapsulation GUE implementation where the guehdr priv flags len function returns 0 even when the GUE PFLAG REMCSUM flag is set. This allows packets...

CVE-2026-72230: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

CVE-2026-74430: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpcinputackall accepts ACKALL packets without checking whether the call is in a state that can legitimately have outstanding transmit buffers. A forged ACKALL can therefore reach a new service...

PT-2026-72538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter xt u32 module where the u32 match it function executes shift operands provided by a rule on a 32-bit value. A malformed u32 rule can specify a shift coun...

CVE-2026-72350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtu32: reject invalid shift counts u32matchit executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during...

PT-2026-72535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Revision 2 of the CONNMARK target in netfilter accepts user-controlled shift parameters applied to 32-bit mark values within the connmark tg shift function. A shift bits value of 32 or...

CVE-2026-74497: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...

Linux Distros Unpatched Vulnerability : CVE-2026-72320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and...

CVE-2026-72065: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

CVE-2026-74550: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

PT-2026-72484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ife decode function where it may return after making only the outer IFE header and metadata pullable. When the decapsulated packet is subsequently passed to eth ty...

PT-2026-72944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component where mtype resize copies comment pointers using memcpy instead of copying the actual comment objects. This creates a race condition duri...