PT-2026-72183

In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211 mle common size uses the first common-info octet as the common information length for all known MLE types. However, ieee80211 mle size ok only validates that octet for...

PT-2026-72936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service DoS issue exists in the binfmt misc module. An entry registered with the 'F' flag opens its interpreter at registration and retains the file until the entry is freed...

Linux Distros Unpatched Vulnerability : CVE-2026-72007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata1: ERR050531: VPUNOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling...

Linux Distros Unpatched Vulnerability : CVE-2026-72497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Addi...

Linux Distros Unpatched Vulnerability : CVE-2026-74302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Fix UAF in hciunregisterdev hciunregisterdev does not disable cmdtimer and ncmdtimer before the hcidev structure is freed. If a timeout fire...

Linux Distros Unpatched Vulnerability : CVE-2026-74528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: hold conn in hcipastsync callback Avoids giving freed pointers to hciconnvalid, which kmalloc may have reused. Hold refcount to avoid that...

Linux Distros Unpatched Vulnerability : CVE-2026-72242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and...

PT-2026-72330

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...

Linux Distros Unpatched Vulnerability : CVE-2026-72260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardwar...

Linux Distros Unpatched Vulnerability : CVE-2026-74405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup...

Linux Distros Unpatched Vulnerability : CVE-2026-74476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: convert fraglist skbs before running XDP A fraglist skb can reach veth with datalen set but nrfrags zero. vethconvertskbtoxdpbuff only converts skbs that...

Linux Distros Unpatched Vulnerability : CVE-2026-72181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIGCPUMASKOFFSTACK is enabled, cpumaskvart is...

Linux Distros Unpatched Vulnerability : CVE-2026-72308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mlxsw: fix refcount leak in mlxswspportlagjoin When mlxswspportlagindexget fails, mlxswspportlagjoin returns an error without releasing the lag reference obtain...

Linux Distros Unpatched Vulnerability : CVE-2026-74545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtase: fix double free of multi-frag skb on DMA map failure In rtasestartxmit, when the head buffer DMA mapping fails after rtasexmitfrags has mapped all...

Linux Distros Unpatched Vulnerability : CVE-2026-74531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: hold conn reference in abortconnsync There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid...

Linux Distros Unpatched Vulnerability : CVE-2026-74356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all...

Linux Distros Unpatched Vulnerability : CVE-2026-74549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nct6775-core Prevent access to unsupported weight registers Sashiko reports: During initialization of the nct6116 chip, the driver sets data-pwmnum to 5...

Linux Distros Unpatched Vulnerability : CVE-2026-72086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path scsibackdeviceaction obtains a command tag in scsibackgetpendreq and submits a...

Linux Distros Unpatched Vulnerability : CVE-2026-74473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use pskbnetworkmaypull in routeshortcircuit routeshortcircuit currently calls pskbmaypullskb, sizeofstruct iphdr or ipv6hdr, which checks if bytes are...

PT-2026-72606

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nft connlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped...