EUVD-2026-59543

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5rumrupdatexlt allocates and DMA maps an XLT buffer with mlx5rumrcreatexlt. The buffer is released by the common cleanup path through mlx5rumrunmapfreexlt. After...

EUVD-2026-59426

In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sgcleanup error path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

EUVD-2026-59365

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in that decode path let a short or malformed reply leak the receive buffer...

CVE-2026-72466

Summary of CVE-2026-72466 : In the Linux kernel’s xprtrdma implementation, two path issues in rpcrdma_is_bcall() can leak the receive buffer and drain the Receive queue when decoding a reply. The speculative zero-byte peek uses xdr_inline_decode() without respecting xdr->end, allowing five sub...

CVE-2026-72309 tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in traceremoteallocbuffer error path If page allocation fails in traceremoteallocbuffer, desc-nrcpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rbdesc will not...

PT-2026-72832

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5r umr update xlt allocates and DMA maps an XLT buffer with mlx5r umr create xlt. The buffer is released by the common cleanup path through mlx5r umr unmap free xlt. After...

PT-2026-73011

In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk build skb Fix generic xmit path multi-buffer logic when packets are either too big count of descriptors exceed MAX SKB FRAGS or an invalid descriptor is included in fragmented...

Linux Distros Unpatched Vulnerability : CVE-2026-74560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: fix buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq...

Linux Distros Unpatched Vulnerability : CVE-2026-72466

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in...

PT-2026-72654

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdma is bcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in that decode path let a short or malformed reply leak the receive buff...

PT-2026-72716

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sg cleanup path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

PT-2026-73012

In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk drop skb for AF XDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq to be published is invalid. Actually the severer thing is the who...

Linux Distros Unpatched Vulnerability : CVE-2026-74459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: etases58x: es58xreadbulkcallback: fix RX buffer leak on URB resubmit failure es58xreadbulkcallback resubmits the RX URB after processing a received packet...

CVE-2026-68135

A flaw was found in the Linux kernel's hip04 network driver. This vulnerability occurs when the buildskb function fails during the hip04rxpoll operation. The driver incorrectly proceeds without releasing the network receive RX buffer and its associated Direct Memory Access DMA mapping. This leads...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

CVE-2026-68231

A flaw was found in the Linux kernel's media: airspy driver. This vulnerability occurs when the airspystartstreaming function encounters an error, such as a disconnected USB device, and fails to return previously queued buffers. This oversight leads to a resource leak, which can result in a denia...

CVE-2026-68211

A flaw was found in the Linux kernel's stm32-dcmipp media driver. When the startstreaming function fails to initialize, it does not properly return previously queued buffers. This oversight can lead to a leak of these buffers, potentially causing resource exhaustion and affecting system stability...

CVE-2026-68222

A flaw was found in the Linux kernel's msi2500 media driver. This vulnerability occurs when the startstreaming function fails to properly return queued buffers, causing them to leak. An attacker with local access could potentially exploit this to cause system instability or a denial of service Do...

K000162871: PowerDNS DNSdist vulnerability CVE-2026-40211

Security Advisory Description An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3...

CVE-2026-68216

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...