PT-2026-72515

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject invalid indirect BO handle in indirect CSD setup v3d get cpu indirect csd params looks up the indirect buffer object from a userspace-supplied handle but never checks the result. A bogus or stale handle makes drm...

Linux Distros Unpatched Vulnerability : CVE-2026-72485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: platform: defer connection counter increment until alloc succeeds coresightaddoutconn increments nroutconns before calling devmkreallocarray and agai...

Linux Distros Unpatched Vulnerability : CVE-2026-74522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free in closefiletableids A ksmbdfile can remain alive after logical close while another session holds a temporary reference obtained throu...

PT-2026-72445

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: fix NULL pointer dereference in graph callback When q6apm free fragments is called it frees rx data.buf/tx data.buf and sets them to NULL under graph-lock. A late DSP buffer-done response can race with this:...

PT-2026-72831

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5 IB METHOD DEVX SUBSCRIBE EVENT links event sub into sub list before initializing the fields used by the shared error path. If eventfd ctx fdget then fails, the unwi...

Linux Distros Unpatched Vulnerability : CVE-2026-74342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 simpexattr: use per-sb cache, kernfsxattrset and kernfsxattrget compute the cac...

Linux Distros Unpatched Vulnerability : CVE-2026-74552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after...

PT-2026-72656

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize re id before removal registration rpcrdma create id registers ep-re rn with the rpcrdma ib client before returning the new rdma cm id to rpcrdma ep create. However rpcrdma ep create currently stores that...

PT-2026-72655

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwr wp create during connect frwr wp create creates the singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. Its failure paths return a negative errno and leave...

PT-2026-72646

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpack pdb pdb-dfa could be NULL if unpack dfa fails, causing a NULL pointer dereference...

PT-2026-72612

In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313 rtc probe calls devm request irq with IRQF SHARED and &pdev-dev as the cookie, but platform set drvdata is only called later after the clock setup. With a shared I...

PT-2026-72747

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio device restore resets the device and restores the negotiated features before calling -restore. viortc freeze intentionally leaves the existing virtqueues in place so the...

PT-2026-72758

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996 mac write txwi 80211 For injected frames e.g. via radiotap, mac80211 can pass info-control.vif = NULL, as explicitly noted in struct ieee80211 tx info. Check vif...

PT-2026-72854

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Trace dma fence signaled, trace dma fence wait end and trace dma fence destroy can all currently dereference a null fence-ops pointer after it has been reset on fence...

PT-2026-72866

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpc input ackall accepts ACKALL packets without checking whether the call is in a state that can legitimately have outstanding transmit buffers. A forged ACKALL can therefore reach a new servic...

Linux Distros Unpatched Vulnerability : CVE-2026-74461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending...

PT-2026-73004

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devm hwmon device register with info has been called. At that time, data-hwmon dev is...

PT-2026-72531

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5e hv vhca stats create is called from mlx5e nic enable, before mlx5e open. At that point priv-stats nch is still zero, because it is only ever incremented in mlx5e...

Linux Distros Unpatched Vulnerability : CVE-2026-72254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftfib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base chain dereferences nftinpkt, NULL on the transmit...

Linux Distros Unpatched Vulnerability : CVE-2026-72341

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix publication race for priv-channelstats mlx5echannelstatsalloc publishes a new entry to priv-channelstats and then increments priv-statsnch as a...