Linux Distros Unpatched Vulnerability : CVE-2026-74328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmab...

CVE-2026-74328

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content unt...

CVE-2026-72093

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdnagemdmabufmmap When vminsertpages fails, the error path calls vma-vmops-closevma which internally calls drmgemvmclose → drmgemobjectput, releasing the GEM object reference acquired at th...

CVE-2026-72094

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

UBUNTU-CVE-2026-72094

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

EUVD-2026-59475

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content unt...

CVE-2026-72094 dma-buf: dma-fence: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

CVE-2026-72094 dma-buf: dma-fence: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

EUVD-2026-59052

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

PT-2026-72764

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content unt...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: tkn, dapr-fips, step-ca, tkn-fips, buf, sftpgo, rclone-fips, step-issuer-fips, cloudflared, step, step-ca-fips, gogatekeeper, gitness, rclone, kyverno-policy-reporter-ui, kyverno-policy-reporter-ui-fips, step-issuer, step-fips, caddy, telegraf, caddy-fips, dapr, karm...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: buf, docker, kaniko, policy-controller-fips, neuvector-scanner, grype, helm-push, melange, harbor-scanner-trivy, harbor-scanner-trivy-fips, k3d, syft, docker-compose, cri-tools, policy-controller, wolfictl, dagger...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: rclone, sftpgo, cloudflared, caddy, buf, gogatekeeper, step, karma, kyverno-policy-reporter-ui, step-ca, gitness, tkn, step-issuer...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, kubernetes-dns-node-cache, traefik, dkron, caddy, buf, frp, kubo, spegel, k8sgateway, seaweedfs, kargo, q, k3s...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: dagger, docker-compose, buf, helm-push, grype, policy-controller, syft, k3d, melange, wolfictl, docker, neuvector-scanner, cri-tools, harbor-scanner-trivy, kaniko...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, cloudflared, spegel, caddy, buf, frp, q, k3s...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: ctop, wolfictl, trivy, aactl, conftest, grype, zot, crossplane, kaniko, cadvisor, buf, melange, tkn, cilium-cli, dagger, buildkitd, docker-compose, kubescape, syft, up, kargo, spire-server, ko...

CVE-2026-68266

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf Direct Memory Access Buffer reference is not properly held for imported Buffer Objects BOs. If the exporter of a dma-buf is freed while a BO still references its reservatio...

PT-2026-70058

Name of the Vulnerable Software and Affected Versions Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x affected versions not specified Description The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers contains an issue where the bt bflb send function in drivers/bluetooth/hci/hci...

CVE-2026-68266

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...