PT-2026-72504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the metadata open function. When kzalloc obj fails, metadata open returns NULL; however, the caller function era ctr only checks for errors using IS...

CVE-2026-72099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hashoffset twice hashoffset is already incremented in the loop "for i = 0; i tocopy; i++, ts--". Do not increment it again...

PT-2026-72289

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug exists in the dm-integrity component where the dm integrity check limits function may fail. When this occurs, the code exits with DM MAPIO KILL while a range is already locked...

PT-2026-72828

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm poll bio function, which serves as the -poll bio callback for stacked dm devices. When using io uring IOPOLL on a dm-stripe target, the system may perform a...

CVE-2026-72096: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

PT-2026-72290

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dm-integrity component when the hash size is smaller than the device tuple size. The system fails to properly zero the remaining space, leading to the leakage...

PT-2026-72285

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm-verity component, the error counter v-corrupted errs is not atomic, which makes it susceptible to race conditions. This issue may result in the system skipping the call to the ...

PT-2026-72286

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the dm-verity component. This occurs within the dm verity loadpin is bdev trusted function when a device does not have a table. Recommendations At th...

PT-2026-72293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The pcache target parses optional arguments as name/value pairs. When a table provides a recognized option name, such as cache mode, without a corresponding value, the parse cache opts...

CVE-2026-74392: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...

PT-2026-72288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-integrity component where the hash offset variable is incremented twice. The variable is already incremented within the loop for i = 0; i to copy; i++, ts--,...

Linux Distros Unpatched Vulnerability : CVE-2026-72099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-integrity: don't increment hashoffset twice hashoffset is already incremented in the loop for i = 0; i tocopy; i++, ts--. Do not increment it again...

Linux Distros Unpatched Vulnerability : CVE-2026-72106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-ioctl: fix a possible overflow in listversiongetinfo sizeoftt-version is 12 bytes, but the code writes 16 bytes into the output buffer - info-vers-version0,...

Linux Distros Unpatched Vulnerability : CVE-2026-72098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows...

Linux Distros Unpatched Vulnerability : CVE-2026-72096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: make error counter atomic The error counter v-corruptederrs was not atomic, thus it could be subject to race conditions. The call to...

CVE-2026-68287

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes NETDMATTRPC and NETDMATTRTIMESTAMP. On 32-bit architectures without...

PT-2026-69687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drop monitor component where size calculations for 64-bit attributes are incorrect. The functions net dm packet report fill and net dm hw packet report fill use nl...

CVE-2026-18970: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack...

CVE-2026-18969: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attac...

CVE-2026-70617: Missing Authorization

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can exploit the...