PT-2026-72552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component regarding writeback error handling. Specifically, the writeback iter loop fails to correctly handle errors; when an error occurs, the function must...

PT-2026-72734

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fails. This prevents resources leak in case pool page allocation fails...

SUSE SLED15 / SLES15 Security Update : dracut (SUSE-SU-2026:3613-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3613-1 advisory. This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: -...

CVE-2026-74495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

CVE-2026-72099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hashoffset twice hashoffset is already incremented in the loop "for i = 0; i tocopy; i++, ts--". Do not increment it again...

PT-2026-72598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the octeontx2-af driver where the maximum number of Logical Functions LFs for NIX is not validated correctly. The maximum number of LFs can be configured via the devli...

CVE-2026-72300: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: validate vendor array size before parsing sofparsetokensets reads array-size while iterating over topology private data. The loop condition only checks that some data remains, so a malformed topology with a...

CVE-2026-72067: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the...

PT-2026-72971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pinctrl devicetree component where the dt remember or free map function duplicates the dev name for each map entry. If the kstrdup const function fails, the dt fre...

CVE-2026-72307: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspvrslpmtreereplace When mlxswspvrslpmtreereplace fails after replacing some VRs, the error rollback loop does not correctly revert the preceding replacements. The loop decrements the index but...

CVE-2026-72144: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

PT-2026-72822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvmet-tcp module. In the nvmet tcp alloc queue function, if a connection is closed during the allocation process for example, when nvmet tcp set queue sock...

PT-2026-72495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp vrs lpm tree replace function. When this function fails after replacing some Virtual Routers VRs, the error rollback loop fails to update th...

CVE-2026-72244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

PT-2026-72215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the irqchip/irq-riscv-imsic-early component. The function imsic early acpi init allocates a firmware node before initializing the IMSIC state. If the imsic setup...

PT-2026-72618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the tcf ct fill params function. When TCA CT LABELS is present, the function calls nf connlabels get, but two error paths utilize a bare...

PT-2026-72364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An internal error exists in the damon sysfs scheme add dirs function. The function sets up the tried regions directory after the stats directory setup is complete. If the tried regions...

PT-2026-72185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the powerpc/uaccess component, the mask user address function incorrectly checks for CONFIG E500 instead of CONFIG PPC E500. This error prevents the mask user address isel function fr...

PT-2026-72568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the pvcalls front event handler function. The function uses the req id variable, obtained from a backend-supplied ring response, to index the fixed-size...

PT-2026-72326

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xen/gntdev component where the gntdev ioctl map grant ref function fails to release a reference acquired by gntdev alloc map when it cannot copy the operation resu...