EUVD-2026-59042

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESERVE OUT parameter buffer to targetparseprouttransportid without tellin...

CVE-2026-72084 scsi: target: Bound PR-OUT TransportID parsing to the received buffer

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESERVE OUT parameter buffer to targetparseprouttransportid without tellin...

CVE-2026-72084 scsi: target: Bound PR-OUT TransportID parsing to the received buffer

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESERVE OUT parameter buffer to targetparseprouttransportid without tellin...

EUVD-2026-59101

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

PT-2026-72420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A local user with eBPF TC hook access can attach a tc filter that truncates a packet and redirects it to a batadv interface. The batadv interface tx function assumes that at least ETH HL...

PT-2026-72727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA System on Chip ASoC topology parser where PCM and DAI name strings stored in fixed-size UAPI arrays are not properly validated. While other parser paths use...

CVE-2026-72300: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: validate vendor array size before parsing sofparsetokensets reads array-size while iterating over topology private data. The loop condition only checks that some data remains, so a malformed topology with a...

PT-2026-72984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the btintel diagnostics function accesses tlv-val0 without verifying if the diagnostics VSE Vendor Specific Element is sufficiently long ...

CVE-2026-72232: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 "net: bridge: xmit: make sure we have at least eth header len bytes", it is possible by for a local user with eBPF TC hook access to attach a t...

PT-2026-72603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SDCA component where the ge put enum double function fails to validate the user-supplied enumeration index item0 before passing it to snd soc enum item to val...

Linux Distros Unpatched Vulnerability : CVE-2026-74291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser path...

Linux Distros Unpatched Vulnerability : CVE-2026-74474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use pskbnetworkmaypull for transmit path header pulls In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the...

Linux Distros Unpatched Vulnerability : CVE-2026-74399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - evm: terminate and bound the evmxattrs read buffer evmreadxattrs allocates size + 1 bytes, fills them from the list of enabled xattrs, and then passes strlentem...

PT-2026-72540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the hid bpf get data function. The function returns a pointer to HID-BPF context data if the provided offset and size are within the ctx-allocated size...

CVE-2026-74295: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling sndsocdapmputenumdouble, which validates that the value is within the enum item range. ...

Linux Distros Unpatched Vulnerability : CVE-2026-74473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use pskbnetworkmaypull in routeshortcircuit routeshortcircuit currently calls pskbmaypullskb, sizeofstruct iphdr or ipv6hdr, which checks if bytes are...

PT-2026-72925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN implementation where the route shortcircuit function incorrectly uses pskb may pull to verify the availability of bytes for the IP header. Because skb-data...

SUSE CVE-2026-14678

Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...

SUSE CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.1...

Linux PCI Component DoS

The vulnerability in the pci/ctxfi/ctamixer.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...