Linux Distros Unpatched Vulnerability : CVE-2026-74456

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and t...

Linux Distros Unpatched Vulnerability : CVE-2026-72015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub...

Linux Distros Unpatched Vulnerability : CVE-2026-74545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtase: fix double free of multi-frag skb on DMA map failure In rtasestartxmit, when the head buffer DMA mapping fails after rtasexmitfrags has mapped all...

Linux Distros Unpatched Vulnerability : CVE-2026-74519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap...

openSUSE 16: ffmpeg-7 / ffmpeg-7-libavcodec-devel / ffmpeg-7-libavdevice-devel / etc (openSUSE-SU-2026:21572-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21572-1 advisory. - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec...

PT-2026-72556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double unlock occurs in the nomem d alloc error path. When the start creating function fails and returns -ENOMEM, the parent directory lo...

PT-2026-72549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the hw engine init function. The error path explicitly frees a Buffer Object BO allocated with xe managed bo create pin map using the xe bo unpin map no vm...

PT-2026-72864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double unlock issue exists in the rxrpc recvmsg function when processing out-of-band OOB messages. A double unlock occurs when a synchronization primitive is released twice, which can...

PT-2026-72594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the sungem network driver. When the register netdev function fails, the gem init one function calls gem remove one, which unregisters and frees resources...

Linux Distros Unpatched Vulnerability : CVE-2026-72099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-integrity: don't increment hashoffset twice hashoffset is already incremented in the loop for i = 0; i tocopy; i++, ts--. Do not increment it again...

Linux Distros Unpatched Vulnerability : CVE-2026-74502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew err...

PT-2026-73026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmaengine: idxd component within the idxd cdev open function. During file-device setup failure in the failed dev add and failed dev name paths, the system drops th...

PT-2026-72955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA timer component where the snd timer close locked function marks an instance with the SNDRV TIMER IFLG DEAD flag but fails to clear it upon completion. This ca...

PT-2026-72288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-integrity component where the hash offset variable is incremented twice. The variable is already incremented within the loop for i = 0; i to copy; i++, ts--,...

PT-2026-72637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the kfd criu resume svm function. The cleanup process iterates through the svms-criu svm metadata list and frees each struct criu svm metadata without...

PT-2026-72494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the vduse module. The issue occurs between the vduse dev read iter and vduse dev msg sync functions. Specifically, when vduse dev read iter dequeues a...

PT-2026-72247

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ixp4xx hss probe function where two HDLC netdevs are allocated instead of one. The first allocation is stored in ndev, initialized, and registered via register hdl...

PT-2026-72352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where non-auto OCFS2 IOC MOVE EXT operations allow userspace to supply a physical me goal. The ocfs2 move extent function initializes new phys cpos fr...

CVE-2026-72371: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFSVOLUMERMTREE is set on Fix afsinsertvolumeintocell to set AFSVOLUMERMTREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be...

PT-2026-72705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An underflow issue exists in the bnxt rx multi page skb function when handling XDP head-grow. The problem occurs during the construction of the skb head using the expression napi build...