Linux Distros Unpatched Vulnerability : CVE-2026-74727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window...

Linux Distros Unpatched Vulnerability : CVE-2026-74642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint...

PT-2026-79692

In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9 wdt: prevent timer rearm during teardown at91 ping rearms the watchdog timer from its callback. timer delete neither waits for a running callback nor prevents it from rearming the timer, so probe failure or...

Linux Distros Unpatched Vulnerability : CVE-2026-74594

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking...

PT-2026-79647

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump to endpoint caused another UAF because it tries to dereference the UMP endpoint object, but this might be executed at a delayed context where the...

PT-2026-79634

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb clientid arr A dibs device interrupt handler can be active after dibs dev del and may still access dmb clientid arr. UAF In case of a failure in dibs dev add being called by dibs lo dev probe dmb...

PT-2026-79636

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smc rx splice smc rx splice passes pages to splice to pipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splice to pipe may...

Linux Distros Unpatched Vulnerability : CVE-2026-74614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b vsock/virtio: add support for device suspend/resume made the run flags transition from fals...

Linux Distros Unpatched Vulnerability : CVE-2026-74606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns,...

Linux Distros Unpatched Vulnerability : CVE-2026-74604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert thermal/drivers/hwmon: Cleanup coding style a bit Revert commit 030a48b0f6ce thermal/drivers/hwmon: Cleanup coding style a bit that introduced a...

Linux Distros Unpatched Vulnerability : CVE-2026-74705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header before ensuring the tunnel header is in the skb head. If the pu...

Linux Distros Unpatched Vulnerability : CVE-2026-74661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: fix netdev use-after-free in beacon worker mac802154beaconworker reads local-beaconreq under RCU and derives the sub-interface from the request, but...

Linux Distros Unpatched Vulnerability : CVE-2026-74637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix group leader use-after-free after sibling detach perfgroupdetach handles leader and sibling detach differently. When the group leader is detached...

PT-2026-79593

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctp outq flush rtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsn gap acked list move...

PT-2026-79661

In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib nhc update mtu fib nhc update mtu walks the nexthop exception table under RTNL, but RTNL does not serialize this walk with PMTU exception updates. The walk uses rcu dereference protected with a...

PT-2026-79620

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan changelink arms vxlan-age timer whenever the requested ageing interval differs from the configured one: if conf.age interval != vxlan-cfg.age interval mod...

PT-2026-79693

In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp make heartbeat ack caches the destination transport in chunk-transport without taking a reference. When src out of asoc ok is enabled, the HEARTBEAT ACK may remain...

PT-2026-79695

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism dev exit A ism interrupt handler can be active in parallel with ism dev exit, accessing freed data structures. No new interrupts will be generated after unregister ieq. Drain ongoing...

PT-2026-79644

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission capture urb complete resubmits each capture URB without anchoring it: usb get urburb; ret = usb submit urburb, GFP ATOMIC; Anchoring is a property of a submission, not of th...

PT-2026-79735

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs server' during a FREE STATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREE STATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the...