PT-2026-73008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libiscsi tcp component where the iscsi tcp hdr dissect function handles data segments for various Protocol Data Unit PDU types. While most opcodes are validated...

Linux Distros Unpatched Vulnerability : CVE-2026-74308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls...

Linux Distros Unpatched Vulnerability : CVE-2026-74453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submissi...

Linux Distros Unpatched Vulnerability : CVE-2026-74365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvdimm/btt: Handle preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadata and workspace state during BTT I/O. The btt-check unit tes...

Linux Distros Unpatched Vulnerability : CVE-2026-72117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix data race on rxstamp/rxifindex in bcmrxhandler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the share...

PT-2026-72961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Bluetooth subsystem. The function hci find adv instance returns an adv info pointer that is only valid while hdev-lock is held. However,...

PT-2026-72356

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc obj / kzalloc objs to allocate the memcard structs, instead of kmalloc obj / kmalloc objs to prevent access to uninitialized data. Fixes runtime error: Fault in...

PT-2026-72195

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5 st idx data on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5 st idx data per cycle; kmemleak flags it as...

PT-2026-72883

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

PT-2026-72882

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

PT-2026-72254

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

PT-2026-72232

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmd wrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGE DIRTY directly in the page table entry during a write TLB miss, without going throu...

PT-2026-72608

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5 Overlap races while breaking stripe batches KCSAN report a race in break stripe batch list vs. raid5 make request on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

PT-2026-73009

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsi scsi cmd rsp copies the sense data of a SCSI Response from the target-supplied data segment. The segment carries a 2-byte sense length followed by the sense...

PT-2026-72744

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4 write inline data end When the data=journal mount option is used, the ext4 journalled write end function incorrectly calls ext4 write inline data end without checking if the EXT4 STATE MAY INLINE DATA...

PT-2026-72871

In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc verify data ensure rx dec buffer alloc rxrpc recvmsg data calls rxrpc verify data whenever the rxrpc call.rx dec buffer is unallocated and assumes that upon successful return that rx dec buffer must be allocated...

PT-2026-72586

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...

PT-2026-72948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fou create function. The function publishes struct fou via sk user data before adding the new FOU port to the per-netns list. If the fou add to port...

PT-2026-72489

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes put and bytes get In sof ipc3 bytes put, the size used for the memcpy is derived from the old data-size already in the buffer, not the incoming new data's size field. If the new data h...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...