PT-2026-73010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zero-copy ZC Tx batch path where the parser stops upon encountering an invalid descriptor. If this occurs after continuation descriptors, the Tx consumer may advan...

PT-2026-72581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the fbnic tx lso function. The function calls skb cow head, which can reallocate the socket buffer skb, including its shared...

CVE-2026-74525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...

CVE-2026-74523: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

PT-2026-72977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net: sxgbe component. When the init dma desc rings function fails to allocate RX descriptor rings, it only frees the partially allocated RX rings. Consequentl...

CVE-2026-74495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

Linux Distros Unpatched Vulnerability : CVE-2026-74523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink...

PT-2026-72206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The MACB driver leaks outgoing SKBs Socket Buffers, which are data structures used to manage network packets that have not been marked as completed. These buffers reside in queue-tx skb...

PT-2026-72759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A token leak occurs in the mt7996 driver within the mt7996 tx prepare skb function. The issue arises when the lookup for link conf or link sta fails, causing the driver to leak a...

CVE-2026-72056: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

PT-2026-72245

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description A resource leak occurs in the net: ena component. The function create queues with size backoff creates XDP TX queues before the regular TX path is established. If the subsequent allocation or...

PT-2026-72761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt76 wifi driver where the mt76 put vif phy link function frees the offchannel mlink using kfree immediately after rcu assign pointerNULL. Because rcu assign point...

CVE-2026-72116: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device removal RX: an RXSETUP update! for an existing op skipped canrxregister unconditionally, even when a concurrent NETDEVUNREGISTER had already torn down its registration op-rxregdev == NUL...

PT-2026-72307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists within the bcm rx handler function when two CAN frames are received and processed simultaneously in a single rx operation by two different CPUs. This issue occurs...

SUSE CVE-2026-68296

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=6335440391831552 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x799c131e146...

SUSE CVE-2026-68120

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

Denial-of-service (DoS)

Spring Cloud Sleuth is vulnerable to a Denial-of-service DoS. The vulnerability is due to specially crafted calls that can trigger a DoS condition when org.springframework.cloud:spring-cloud-sleuth-instrumentation is used with Spring TX instrumentation enabled, allowing an attacker to exploit the...

Linux Distros Unpatched Vulnerability : CVE-2026-68120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet...

SUSE CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...