EUVD-2026-59048

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdnadrmsyncboioctl looks up args-handle in the ioctl caller's drmfile. For SYNCDIRECTFROMDEVICE, it then calls amdxdnahwctxsyncdebugbo, but passes abo-client...

EUVD-2026-59021

In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direction tegragpiodirectioninput and tegragpiodirectionoutput already program the GPIO controller direction registers directly. The additional pinctrlgpiodirectioninput/output calls do n...

CVE-2026-72063

CVE-2026-72063 affects Linux kernel Tegra GPIO direction handling. The fix removes redundant pinctrl_gpio_direction_input()/pinctrl_gpio_direction_output() calls, which previously entered the pinctrl core and could sleep in atomic context while a per-line spinlock was held. tegra_gpio_direction_i...

CVE-2026-68458 binder: cache secctx size before release zeroes it

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

EUVD-2026-59080

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

CVE-2026-68458 binder: cache secctx size before release zeroes it

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

CVE-2026-73631: Unsynchronized Access to Shared Data in a Multithreaded Context

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

Linux Distros Unpatched Vulnerability : CVE-2026-72388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dmafence objects can be shared with other subsystems, they may be accessed from...

CVE-2026-72474: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor For architectures like Microblaze or arm64 where this IP is used, DMADIRECTREMAP is set which means that dmaalloccoherent might remap and hence vmalloc some memory...

PT-2026-72897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the drm/vmwgfx component. The function vmw cmd dx bind query unconditionally dereferences sw context-dx ctx node-ctx. A user...

PT-2026-73059

Name of the Vulnerable Software and Affected Versions Shescape versions prior to 2.1.15 Shescape versions 3.0.0 through 3.0.1 Description On Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox, the software fails to properly escape tilde characters ...

PT-2026-72875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the device pasid table teardown function zeroes a 128-bit scalable-mode context entry using context clear entry while the Present bit...

PT-2026-72966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 PCI component regarding memory accounting for pinned and unpinned pages. The account mem and unaccount mem functions call get uid, which increments the...

PT-2026-72920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the GPIO PCH driver where the pch irq type function, registered as the irq chip .irq set type callback, uses a regular spinlock t via spin lock irqsave. In PREEMPT RT...

CVE-2026-74468: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

PT-2026-72679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the 9p network filesystem implementation within trans rdma.c. The rdma-state variable is modified without holding the req lock spinlock in the recv done and p9...

PT-2026-72909

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the peak usb component where the channel control index ctrl idx is derived from rx-len, which is sourced directly from a device USB payload. While a mask allows values...

Linux Distros Unpatched Vulnerability : CVE-2026-74314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That mak...

Linux Distros Unpatched Vulnerability : CVE-2026-74457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. Th...

PT-2026-72576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the fence lock is not acquired using an IRQ-safe variant. Because dma fence objects can be shared with other subsystems, they may be...