CVE-2026-74680

This vulnerability affects the Linux kernel 's cxacru USB ATM driver (drivers/usb/atm/cxacru.c). The root cause is a missing cleanup in cxacru_cm(): when an error occurs while submitting or waiting for snd_urb, the function returns early without killing the already-submitted rcv_urb, leaving it i...

CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

EUVD-2026-64367

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

EUVD-2026-64541

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

CVE-2026-74604 Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

CVE-2026-74604

CVE-2026-74604 is a use-after-free vulnerability in the Linux kernel's thermal/drivers/hwmon component. It was introduced by commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit"), which removed a valid check from the error path of thermal_add_hwmon_sysfs() . The fix is a rever...

CVE-2026-74604 Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

PT-2026-79609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the error path of the thermal add hwmon sysfs function. This was caused by the removal of a valid check during a coding style cleanup. Recommendations At...

Linux Distros Unpatched Vulnerability : CVE-2026-74721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to...

Linux Distros Unpatched Vulnerability : CVE-2026-74604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert thermal/drivers/hwmon: Cleanup coding style a bit Revert commit 030a48b0f6ce thermal/drivers/hwmon: Cleanup coding style a bit that introduced a...

SUSE CVE-2026-68240

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drmgpusvmgetpages only stored the local dpagemap into svmpages-dpagemap on the success path. If a later page failed e.g. -EOPNOTSUPP when ctx-allowmixed is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102033 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC...

Linux Distros Unpatched Vulnerability : CVE-2026-63380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error pat...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102050 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext error path Sashiko points out that...

AZL-96912 CVE-2026-63380 affecting package libtevent 0.14.1-1

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-74326

A flaw was found in the Linux kernel's mt76 wireless driver. This flaw occurs when certain memory allocation or I/O mapping functions fail during the probe error path, leading to a failure to deallocate previously reserved resources. This can result in a resource leak, potentially leading to syst...

CVE-2026-74279

A flaw was found in the Linux kernel's cavium/cpt cryptographic driver. An incorrect loop index in the sgcleanup error path during Direct Memory Access DMA buffer unmapping could lead to resource exhaustion. This issue results in successfully mapped entries being leaked and failed entries being...

Linux Distros Unpatched Vulnerability : CVE-2026-74326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcimiomapregion or devmkmemdu...

SUSE CVE-2026-68221

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...