CVE-2026-72406: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

CVE-2026-72405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

CVE-2026-72484: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...

CVE-2026-72368: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomemdalloc error path When startcreating fails and returns -ENOMEM, it has already released the parent directory lock in startdirop: static struct dentry startdirop... ... inodelocknesteddir,...

CVE-2026-72361: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hwengine: Fix double-free of managed BO in error path The error path in hwengineinit explicitly frees a BO allocated with xemanagedbocreatepinmap via xebounpinmapnovm. Since the managed BO already has a devm cleanup action...

CVE-2026-74545: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA map failure In rtasestartxmit, when the head buffer DMA mapping fails after rtasexmitfrags has mapped all fragments, the error path clears the fragment descriptors with...

CVE-2026-74456: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and the URB is flagged URBFREEBUFFER so that the final usbfreeurb also free...

CVE-2026-74502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew error path, frees it with kfree but leaves ump-outcvts pointing at the...

PT-2026-72268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and double-free issue exists in the ims pcu disconnect function. The function is designed to perform cleanup only when the primary control interface is unbound, but it...

PT-2026-72275

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel's SCSI xen scsiback component where the scsiback device action function fails to free a command tag when a task-management request submitted via targe...

PT-2026-72986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the iso conn del and iso chan del functions in the Bluetooth ISO implementation. This race can lead to a double-put of the iso conn reference count,...

PT-2026-72997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the rtase start xmit function. When the head buffer DMA mapping fails after rtase xmit frags has mapped all fragments, the error path utilizes rtase tx clea...

PT-2026-72204

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fs/resctrl component where a pseudo-locked group's RMID Resource Monitoring ID is freed during its creation. During an unmount operation, the rmdir all sub functio...

PT-2026-72954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the ALSA component of the Linux kernel. The function snd ump attach legacy rawmidi allocates a legacy conversion array ump-out cvts. If an error occurs duri...

PT-2026-72408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free or use-after-free issue exists in the sunrpc component. The svc release rqst function executes a callback within rqstp-rq procinfo-pc release. If a worker thread processes ...

CVE-2026-72452: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

PT-2026-72809

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid1 and raid10 components regarding bio accounting for split md cloned bios. The previous logic failed to reliably determine if a bio was an md cloned bio...

Linux Distros Unpatched Vulnerability : CVE-2026-74373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: fix bio accounting for split md cloned bios Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the...

PT-2026-72870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc recvmsg oob function where out-of-band OOB messages are handled incorrectly when using the MSG PEEK flag. While the unlink operation from recvmsg oobq is...

PT-2026-72559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS Andrew File System implementation where the afs insert volume into cell function incorrectly assigns the AFS VOLUME RM TREE flag to the new volume instead of t...