PT-2026-72367

In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate cache leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of node putnp correctly drops the...

PT-2026-72402

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem device put causing reference leak In cpcap battery detect battery type, the reference to an nvmem device obtained via nvmem device find is not released with nvmem device put on the...

PT-2026-72428

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platform device register fails in sm501 register device, the embedded struct device in pdev has already been initialized by device initialize, but the failure path...

Linux Distros Unpatched Vulnerability : CVE-2026-72438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: fix writespending and barrier reference leaks on discard failures raid10makerequest acquires a writespending reference with mdwritestart before calli...

Linux Distros Unpatched Vulnerability : CVE-2026-72040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count...

Linux Distros Unpatched Vulnerability : CVE-2026-72440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1: fix writespending and barrier reference leaks on write failures raid1makerequest acquires a writespending reference with mdwritestart before calling...

PT-2026-72626

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes pending and barrier reference leaks on discard failures raid10 make request acquires a writes pending reference with md write start before calling raid10 handle discard. Several failure paths in raid10 handl...

PT-2026-72988

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release iso sock kill tests !sock flagsk, SOCK ZAPPED || sk-sk socket || sock flagsk, SOCK DEAD for early return, but this is always true since sock orphansk sets SOCK DEAD, so the sk...

PT-2026-72808

In the Linux kernel, the following vulnerability has been resolved: raid1: fix nr pending leak in REQ ATOMIC bad-block error path In raid1 write request, each per-mirror loop iteration begins by incrementing rdev-nr pending. If a REQ ATOMIC write encounters a badblock within the requested range,...

PT-2026-72433

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1x device parse dt error path After device initialize, the embedded struct device in struct host1x device should be released through the device core with put device. In host1x device...

Linux Distros Unpatched Vulnerability : CVE-2026-72260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardwar...

Linux Distros Unpatched Vulnerability : CVE-2026-72179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: cacheinfo: Fix node reference leak in populatecacheleaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates...

SUSE CVE-2026-68180

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

Linux Distros Unpatched Vulnerability : CVE-2026-68232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released,...

SUSE CVE-2026-68331

In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The Ethernet connect path stores that device in mac-mcdev and keeps it for the...

SUSE CVE-2026-68333

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch port connect path stores that device in mac-mcdev and keeps it for th...

SUSE CVE-2026-68422

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in mergerelocroots If we have an unexpected relocroot for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missi...

CVE-2026-68180

A flaw was found in the intelth Intel Trace Hub driver within the Linux kernel. This vulnerability occurs because the intelthoutputopen function acquires a device reference that is not properly released by the intelthmscrelease function when handling Message Signaled Interrupt MSC outputs...

CVE-2026-68232

A flaw was found in the Linux kernel's drm/gpusvm component. When the kvmallocarray function fails within drmgpusvmrangeevict, a previously acquired memory management MM reference is not properly released. This oversight leads to a reference leak, which can result in resource exhaustion and a...

CVE-2026-68333

A flaw was found in the dpaa2-switch component of the Linux kernel. When a MAC Media Access Control object is disconnected, the system fails to release a reference to the associated MAC endpoint device. This oversight causes a device reference to leak with every successful connection and subseque...