CVE-2026-74407 wifi: ath11k: cancel SSR work items during PCI shutdown

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

CVE-2026-74407

In the Linux kernel, CVE-2026-74407 impacts PCI/MHI-based ath11k WLAN: during shutdown, SSR (WLAN firmware crash recovery) can race with teardown, leading to a NULL pointer dereference in the MHI teardown path while freeing DMA-backed contexts. The fix is to cancel SSR-related work items during P...

CVE-2026-72434 netfilter: ipset: make sure gc is properly stopped

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, canceldelayedworksync was called while gc calls queuedelayedwork unconditionally which can lead not to properly shutting down the gc...

CVE-2026-72399

In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdpframe The size of xdpredirectarr array is ENETCMAXSKBFRAGS. However, the number of fragments contained in xdpframe may be greater than or equal to ENETCMAXSKBFRAGS, which will cau...

CVE-2026-72161

The CVE describes a NULL dereference in OCFS2 during inode eviction after unmount, caused by osb->journal being freed but later dereferenced in ocfs2_checkpoint_inode(). The fix adds a NULL check for osb->journal in ocfs2_checkpoint_inode(), so if the journal is NULL (already flushed/destro...

EUVD-2026-58919

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2evictinode - ocfs2clearinode -...

PT-2026-72571

In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr wq timer race in sctp free addr wq sctp free addr wq previously removed addr wq timer using timer delete while holding addr wq lock. However, timer delete does not guarantee that a currently running timer handler h...

Linux Distros Unpatched Vulnerability : CVE-2026-74407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL...

PT-2026-72349

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2 checkpoint inode During unmount, ocfs2 journal shutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2 evict inode - ocfs2 clear inode ...

PT-2026-72843

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

CVE-2026-72636 Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service

Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns against names is implemented recursively and had no bound on recursion depth or on the total number of mat...

Schneider Electric PowerChute Serial Shutdown < 1.6 Improper Restriction of Excessive Authentication Attempts (SEVD-2026-223-01)

The version of Schneider Electric PowerChute Serial Shutdown installed on the remote host is prior to 1.6. It is, therefore, affected by a vulnerability. - CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized...

CVE-2026-68233

A flaw was found in the drm/vc4 component of the Linux kernel. A logic error in the BO cache timer shutdown process allows the timer to be rearmed even after it has been destroyed. This can lead to work being queued again after teardown, potentially causing system instability or a denial of servi...

CVE-2026-68233

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold. vc4bocachedestroy deletes the timer and then cancels the work, which do...

EUVD-2026-55334

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold. vc4bocachedestroy deletes the timer and then cancels the work, which do...

CVE-2026-68233 drm/vc4: Shut down BO cache timer before teardown

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold. vc4bocachedestroy deletes the timer and then cancels the work, which do...

CVE-2026-68233

In the Linux kernel DRM/VC4 subsystem, CVE-2026-68233 addresses a use-after-free-like race where a timer callback (BO cache timer) can be rearmed by time_work during teardown. vc4_bo_cache_destroy() deletes the timer and cancels the work, but the cancelled work can rearm the timer and queue work ...

Linux Distros Unpatched Vulnerability : CVE-2026-68233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold...

CVE-2026-54213

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...

EUVD-2026-54444

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...