PT-2026-104981

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl log net exit calls nf log unset, which clears the logger pointer without an RCU grace period. Immediately after, ops free list...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A “use-after-free” vulnerability in the Linux kernel’s ipv4:igmp component can be exploited to achieve local privilege escalation. A race condition can also be exploited, causing a timer to be mistakenly registered on a RCU read-locked object that is then freed by another thread. We recommend...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098926 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in...

Linux Distros Unpatched Vulnerability : CVE-2026-72094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can...

RHEL 10 : kernel (RHSA-2026:55445)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55445 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iommu: disable SVA when...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100505 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099924 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099894 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: flowlabel: defer exclusive option free until RCU teardown ip6flseqshow walks the globa...

EUVD-2026-59705

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

CVE-2026-74325 wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: use kfreercu for offchannel link in mt76putvifphylink mt76putvifphylink frees the offchannel mlink with plain kfree after rcuassignpointerNULL. However, rcuassignpointer only prevents future RCU readers from obtaining...

EUVD-2026-58881

In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 "can: bcm: use callrcu instead of costly synchronizercu" replaced synchronizercu in bcmdeleterxop with callrcu and introduced the RXNOAUTOTIME...

CVE-2026-72072 net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadatadst on RX SC delete When an offloaded MACsec RX SC is deleted, macsecdelrxscctx freed the per-SC metadatadst with metadatadstfree, which kfrees the object unconditionally and ignor...

CVE-2026-72024

CVE-2026-72024 concerns the Linux kernel’s mac802154 handling of interfaces under RCU. The issue arises when bulk teardown paths remove entries with list_del(), allowing an asynchronous transmit completion to follow a poisoned list node in ieee802154_wake_queue(). The root cause is the use of lis...

CVE-2026-72012 tracing/osnoise: Call synchronize_rcu() when unregistering

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

CVE-2026-72012 tracing/osnoise: Call synchronize_rcu() when unregistering

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

PT-2026-72573

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the fprobe fgraph entry function. The issue occurs because the function performs two separate walks of the per-ip fprobe list under rcu read lock to...

PT-2026-72201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing/osnoise component where the synchronize rcu function is not called during unregistration. This failure to synchronize allows the reference on the tracer to...

CVE-2026-72012: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

Linux Distros Unpatched Vulnerability : CVE-2026-72012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the...

Linux Distros Unpatched Vulnerability : CVE-2026-72123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 can: bcm: use callrcu instead of costly synchronizercu replaced...