CVE-2026-72026

The CVE-2026-72026 vulnerability is in the Linux kernel IRQ subsystem for riscv IMSIC early initialization. The issue: imsic_early_acpi_init() allocates a firmware node before IMSIC state setup; if imsic_setup_state() fails, the allocated fwnode is not freed. The fix adds cleanup on the error pat...

PT-2026-72791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the info-node RB-tree member is zero-initialized via kzalloc. When a device does not support ATS Address Translation Services, the devic...

PT-2026-72365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Error paths within the damon sysfs access pattern add dirs and damon sysfs scheme add dirs functions release directory references in the incorrect order. Specifically, in access pattern...

PT-2026-72496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp port lag join function. When the mlxsw sp port lag index get function fails, the system returns an error without releasing the lag reference...

PT-2026-72594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the sungem network driver. When the register netdev function fails, the gem init one function calls gem remove one, which unregisters and frees resources...

PT-2026-72271

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the efct hw io abort function. When the efct hw reqtag alloc function fails, the error path returns -ENOSPC without releasing the reference previously...

PT-2026-72411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvdimm/btt component when arena discovery fails. Specifically, memory allocated by the functions btt freelist init, btt rtt init, and btt maplocks init is not...

PT-2026-72453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvidiafb probe function. The memory allocated for modelist within the nvidia set fbinfo function is not properly released during subsequent error paths...

PT-2026-72455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the fbdev: carminefb component. The issue occurs within the alloc carmine fb function, where memory allocated for modelist in the fb videomode to modelist functio...

PT-2026-72464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the metronomefb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is n...

PT-2026-72458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the fbdev s3fb component. In the s3 pci probe function, memory allocated for modelist via the fb videomode to modelist function is not properly released during...

PT-2026-72463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the broadsheetfb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs in the fb deferred io init function is not...

PT-2026-72215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the irqchip/irq-riscv-imsic-early component. The function imsic early acpi init allocates a firmware node before initializing the IMSIC state. If the imsic setup...

PT-2026-72364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An internal error exists in the damon sysfs scheme add dirs function. The function sets up the tried regions directory after the stats directory setup is complete. If the tried regions...

PT-2026-72618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the tcf ct fill params function. When TCA CT LABELS is present, the function calls nf connlabels get, but two error paths utilize a bare...

PT-2026-72822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvmet-tcp module. In the nvmet tcp alloc queue function, if a connection is closed during the allocation process for example, when nvmet tcp set queue sock...

CVE-2026-74372: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: raid1: fix nrpending leak in REQATOMIC bad-block error path In raid1writerequest, each per-mirror loop iteration begins by incrementing rdev-nrpending. If a REQATOMIC write encounters a badblock within the requested range, the co...

CVE-2026-72144: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

PT-2026-72804

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ath12k wifi driver. In the ath12k wifi7 dp rx h verify tkip mic function, a call to ath12k dp rx check nwifi hdr len valid may return false if the NWIFI heade...

PT-2026-72734

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fails. This prevents resources leak in case pool page allocation fails...