PT-2026-73023

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL pointer dereference: BUG: kernel NULL pointer dereference, address:...

PT-2026-72894

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroy workqueueNULL on vkms init failure Two paths through vmw vkms init can leave vmw-crc workq NULL while still leaving the rest of the driver in a state that calls vmw vkms cleanup at module unload: 1. vmw...

PT-2026-72648

In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no new privs test aa change profile builds a replacement label with fn label build in scope before the no new privs subset check. The build helper can fail and return NULL or an ERR PTR, but the...

PT-2026-72634

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: reject stream disable with no active interface handle uaudio stream req resolves an interface index with info idx from ifnum, which returns -EINVAL when no interface matches. The enable branch and the...

PT-2026-72573

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobe fgraph entry fprobe fgraph entry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcu read lock only. A fprobe...

PT-2026-72565

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of AS RELEASE ALWAYS for symlinks and mountpoints Regular AFS files correctly use afs file aops which have release folio set as netfs release folio, so AS RELEASE ALWAYS is valid for them when fscache is enabl...

PT-2026-72591

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcp find fc interface currently selects the first vendor-specific...

PT-2026-72349

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2 checkpoint inode During unmount, ocfs2 journal shutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2 evict inode - ocfs2 clear inode ...

PT-2026-72293

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cache mode",...

PT-2026-72281

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject command submission on devices without a submit op amdxdna cmd submit calls xdna-dev info-ops-cmd submit unconditionally, but only aie2 dev ops defines that callback. aie4 vf ops the AIE4 SR-IOV virtual...

PT-2026-72197

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HW VOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECT CTL domains, but only after checking if t...

Linux Distros Unpatched Vulnerability : CVE-2026-74387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: midi: Serialize output teardown with eventinput eventprocessmidi borrows msynth-outputrfile.output and then passes the substream to dumpmidi and...

Linux Distros Unpatched Vulnerability : CVE-2026-72242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and...

PT-2026-72740

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci qca: fix NULL pointer dereference in qca setup for non-serdev device hu-serdev is NULL for hci uart attached via non-serdev paths, but qca setup unconditionally calls serdev device get drvdatahu-serdev and...

Linux Distros Unpatched Vulnerability : CVE-2026-74441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during port unregistration where pending partner work...

Linux Distros Unpatched Vulnerability : CVE-2026-72373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified...

SUSE CVE-2026-68275

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...

GO-2023-2185 vulnerabilities

Vulnerabilities for packages: go...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

The vulnerability in the `ethernet/emulex/benet/be_cmds.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ethernet/emulex/benet/becmds.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...