EUVD-2026-59324

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease instead of...

CVE-2026-72425 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease instead of...

CVE-2026-72360

The CVE-2026-72360 entry concerns the Linux kernel, specifically the DRM XE PCIe PF path. The vulnerability arises from PF relay logic attempting to process FAST_REQ or EVENT relays; VF/PF relay actions were defined only for regular REQUEST messages. This misbehavior could break the VFPF ABI prot...

EUVD-2026-59228

In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pcidev LUT The PF SR-IOV enable path caches VF pcidev pointers in dpiringtovfpcidevlut by iterating with pcigetdevice. Those entries do not own a reference, because the iterator drops the previous...

CVE-2026-72329

CVE-2026-72329 affects the Linux kernel’s net/liquidio SR-IOV path. The vulnerability arises from the PF SR-IOV enable path caching VF pci_dev pointers in dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(), where entries do not own a reference and the iterator drops the previous device ...

CVE-2026-72312 octeontx2-af: fix VF bringup affecting PF promiscuous state

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs...

CVE-2026-72312

CVE-2026-72312 affects the Linux kernel component octeontx2-af and fixes an issue where VF bringup could erroneously modify the PF’s promiscuous/allmulti MCAM rules. The root cause was that mbox handling of nix_set_rx_mode (and related APIs) acted only on the PF, not the VF, potentially clearing ...

EUVD-2026-59211

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs...

CVE-2026-72312 octeontx2-af: fix VF bringup affecting PF promiscuous state

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs...

EUVD-2026-59003

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

CVE-2026-72045 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

CVE-2026-72045 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

CVE-2026-72045

CVE-2026-72045 : In the Linux kernel (octeontx2-af: cn10k), a VF could access another function’s LMTLINE via rvu_mbox_handler_lmtst_tbl_setup() using base_pcifunc as a direct index into the LMT map. The issue arises because base_pcifunc is not sanitized and is not bounded to the VF’s PF, allowing...

Linux Distros Unpatched Vulnerability : CVE-2026-74527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 o...

PT-2026-72979

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC ...

PT-2026-72613

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice reset all vfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice vf ctrl vsi release instead of ic...

PT-2026-72500

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix set rx mode for a VF with promiscuous and all multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs...

PT-2026-72234

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu mbox handler lmtst tbl setup uses req-base pcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it...

PT-2026-72548

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST REQUEST nor EVENT messages as this would result in...

Linux Distros Unpatched Vulnerability : CVE-2026-68384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xebomove attaches VF CCS read/write batch buffers BBs to a BO after it transitions NULL/SYSTEM ...