PT-2026-72228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the bnx2x alloc mem bp function. The issue occurs when the allocation of fpi.tpa info fails, causing the error path to fail to free the previously allocated struc...

PT-2026-72276

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the lpfc sli4 driver resource setup function. The memory allocated for mboxq via mempool alloc is not properly released during certain early exit error paths...

PT-2026-72673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the coresight platform where the coresight add out conn function increments the nr outconns counter before calling devm krealloc array and devm kmalloc, and the...

PT-2026-105068

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag...

PT-2026-72248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the t7xx cldma late init function. The function creates md ctrl-gpd dmapool before initializing the TX and RX rings. If the initialization of any ring fails, the...

CVE-2026-72067: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the...

PT-2026-72412

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs during the initialization of the Block Translation Table BTT in the nvdimm module. Specifically, arenas allocated by the discover arenas or create arenas functions a...

PT-2026-72332

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dell-laptop platform driver where the dell init function fails to properly clean up resources during an initialization error. When the function initializes resourc...

PT-2026-72497

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in trace remote alloc buffer error path If page allocation fails in trace remote alloc buffer, desc-nr cpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rb desc...

PT-2026-72810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid1 and raid10 components where error-path detection fails when relying on r1 bio in raid1 or r10 bio-read slot in raid10, as these may be NULL or -1 after a...

PT-2026-72803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ath12k mac vdev create function where three error path failures can leave the arvif state inconsistent. First, if ath12k wmi vdev create fails, the function return...

PT-2026-72599

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc err work Upon an MDIO CRC error mxl862xx crc err work fn walks the DSA ports and closes the CPU port conduits: dsa switch for each cpu portdp, priv-ds dev closedp-conduit...

PT-2026-72376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ntfs lookup inode by name function returns MFT references read from directory index entries on disk. Because these values are untrusted, the function may return an error-marked MFT...

PT-2026-72633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio qcom component where the subs-opened variable is set before the service interval is validated during the enable process. If an invalid interval is...

CVE-2026-74375: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is suspended befo...

CVE-2026-74355: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...

CVE-2026-74326: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcimiomapregion or devmkmemdup fail, the code returns directly without cleaning up previously allocated resources: - mt76device allocated by mt76allocdevice - pci irq...

CVE-2026-72453: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

CVE-2026-72188: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

CVE-2026-72423: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntrack lookup and allocation kfuncs take an opts pointer together with an optssz argument. The verifier checks only the memory range described by optssz, but the wrappers...