CVE-2026-74563: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a scoped IPv6 interface with devgetbyindexrcu, drops the RCU read-side lock, and only then passes the bare struct netdevice into...

PT-2026-72941

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mac80211 wifi component. The function ieee80211 stop tx ba cb passes tid tx to kfree rcu via ieee80211 remove tid tx and subsequently reads the ndp...

CVE-2026-72024: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local-interfaces under RCU. The bulk hardware teardown path removes entries with listdel, so an asynchronous transmit completion can...

PT-2026-72213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac802154 module where the bulk hardware teardown path removes entries using list del. Because queue wake, stop, and disable paths traverse local-interfaces under...

CVE-2026-74512: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

Linux Distros Unpatched Vulnerability : CVE-2026-74465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs...

Linux Distros Unpatched Vulnerability : CVE-2026-72436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: Don't use testbit in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using testbit which is a...

Linux Distros Unpatched Vulnerability : CVE-2026-72390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schteql: Introduce slaveslock to avoid race condition and UAF The teql master-slaves singly linked list is not protected against multiple writes. It...

Linux Distros Unpatched Vulnerability : CVE-2026-74289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fib: Don't dump dying fibinfo in fibleafnotify. syzbot reported use-after-free in nsimfib4prepareevent. 0 The problem is that the following functions call...

Linux Distros Unpatched Vulnerability : CVE-2026-72069

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the...

PT-2026-72828

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm poll bio function, which serves as the -poll bio callback for stacked dm devices. When using io uring IOPOLL on a dm-stripe target, the system may perform a...

PT-2026-72315

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ISO-TP implementation of the CAN protocol. The isotp notify function unregisters CAN filters via can rx unregister and clears the so-bound variable without...

PT-2026-72309

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CAN BCM module where missing RCU Read-Copy-Update list annotations and operations lead to improper initialization and removal of structures. Specifically, the bcm...

PT-2026-73015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel. The function rds tcp laddr check retrieves a scoped IPv6 interface using dev get by index rcu but releases the RCU read-side lock...

PT-2026-72510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition occurs between device teardown and incoming Multicast Listener Discovery MLD query processing. During device destruction, the primary reference to inet6 dev is dropped,...

PT-2026-72592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the TIPC UDP media bearer teardown process. The cleanup bearer function calls dst cache destroy on replicast caches before calling synchronize net,...

CVE-2026-72321: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in igmpmodtimer and igmpstoptimer When a timer is deleted and not re-armed in igmpmodtimer, or stopped in igmpstoptimer, the code currently decrements the reference counter of the multicast...

CVE-2026-74289: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fibinfo in fibleafnotify. syzbot reported use-after-free in nsimfib4prepareevent. 0 The problem is that the following functions call fibinfohold / refcountinc while dumping fibinfo under RCU, which is...

PT-2026-72201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing/osnoise component where the synchronize rcu function is not called during unregistration. This failure to synchronize allows the reference on the tracer to...

PT-2026-72623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component where the kfree rcu function was called before the rcu assign pointer function when handling the comment extension. This incorrect...