CVE-2026-74626 NTB: ntb_netdev: Preserve RX queue depth on allocation failure

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

EUVD-2026-64563

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

CVE-2026-74626 NTB: ntb_netdev: Preserve RX queue depth on allocation failure

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

CVE-2026-74626

CVE-2026-74626 affects the Linux kernel's Non-Transparent Bridge (NTB) virtual ethernet driver (ntb_netdev). The root cause is in ntb_netdev_rx_handler(), which hands the received skb to the network stack before allocating its replacement. When the allocation fails, the buffer is not reposted, so...

Linux Distros Unpatched Vulnerability : CVE-2026-74626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. ...

PT-2026-79631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntb netdev rx handler function where the received skb socket buffer is passed to the network stack before a replacement is allocated. If the allocation fails, no...

PT-2026-79711

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr dev fails during auxiliary device setup, the error path calls auxiliary device uninit, which eventually invokes bnge aux dev release. The release...

CVE-2026-72252

A flaw was found in the Linux kernel. A memory allocation failure during network filter operations can lead to an inconsistent state within the netfilter: nftsetpipapo module. This inconsistency can result in out-of-bounds writes, which may allow a local attacker to cause a system crash denial of...

CVE-2026-72202

A flaw was found in the Linux kernel's NTFS filesystem driver. When calculating free clusters or Master File Table MFT records, a temporary state object is allocated on the heap. If this allocation fails, processes waiting for these counts can become unresponsive, leading to a denial of service D...

CVE-2026-72457

A flaw was found in the AppArmor security module within the Linux kernel. During the unpacking of security policies, a memory allocation failure for the ACCEPT2 table was not handled correctly. This could result in an incomplete security policy being loaded, potentially leading to a bypass of...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

kernel: rxrpc: Fix potential UAF after skb_unshare() failure

A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability arises when the system attempts to unshare a packet buffer, and the operation fails due to an allocation issue. This failure can lead to a Use-After-Free UAF condition, where the system attempts to access memory that has...

AZL-96195 CVE-2026-74525 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...

CVE-2026-74448

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early via 'return retval' without going through the...

CVE-2026-74550

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

EUVD-2026-59718

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...

CVE-2026-74525 net: sxgbe: free TX rings on RX allocation failure

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...

CVE-2026-74525

CVE-2026-74525 affects the Linux kernel net sxgbe driver. When RX descriptor ring allocation fails, init_dma_desc_rings() frees partial RX rings but leaks TX rings allocated earlier. The fix rearranges error labels to clean up TX rings on RX failure. Affected component: net/sxgbe RX/TX ring initi...

CVE-2026-74448

CVE-2026-74448 affects the Linux kernel’s DRM/amdkfd path. When MES is enabled and amdgpu_amdkfd_alloc_kernel_mem() fails during the first queue creation for a process, pqm_create_queue() may return early via a plain return, skipping the error cleanup and leaving a reserved QID bit set in queue_s...

CVE-2026-74442 drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...