PT-2026-72404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the remoteproc qcom component. The qcom add minidump segments function fails to free the allocated name of the minidump region when an error occurs before the...

PT-2026-72478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the KVM s390 PCI component during AIF enable failure. The function kvm s390 gisc register registers the guest ISC before pinning guest interrupt forwardi...

PT-2026-72971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pinctrl devicetree component where the dt remember or free map function duplicates the dev name for each map entry. If the kstrdup const function fails, the dt fre...

PT-2026-72507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipvs component where inner IP headers in ICMP errors from tunnels may not be correctly placed in the skb headroom after outer headers are stripped using the pskb...

PT-2026-72464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the metronomefb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is n...

PT-2026-72957

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ALSA 6fire driver. The driver fails to handle a pending USB Request Block URB—a data structure used to manage USB communication—during the error...

CVE-2026-72244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

SUSE SLED15 / SLES15 Security Update : dracut (SUSE-SU-2026:3613-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3613-1 advisory. This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: -...

PT-2026-105068

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag...

PT-2026-72276

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the lpfc sli4 driver resource setup function. The memory allocated for mboxq via mempool alloc is not properly released during certain early exit error paths...

PT-2026-72411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvdimm/btt component when arena discovery fails. Specifically, memory allocated by the functions btt freelist init, btt rtt init, and btt maplocks init is not...

PT-2026-72734

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fails. This prevents resources leak in case pool page allocation fails...

PT-2026-72803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ath12k mac vdev create function where three error path failures can leave the arvif state inconsistent. First, if ath12k wmi vdev create fails, the function return...

PT-2026-72549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the hw engine init function. The error path explicitly frees a Buffer Object BO allocated with xe managed bo create pin map using the xe bo unpin map no vm...

PT-2026-72816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gpu: host1x component where the pin job function incorrectly handles the return value of iommu map sgtable. Due to a change where iommu map sgtable now returns an...

CVE-2026-72155: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...

PT-2026-72193

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description A memory leak exists in the ieee80211 register hw function within the mac80211 wifi module. The issue occurs when the kmemdup function fails while copying supported band structures, causing th...

PT-2026-72831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference exists in the RDMA/mlx5 component. The function MLX5 IB METHOD DEVX SUBSCRIBE EVENT links event sub into sub list before initializing fields required by the shared err...

PT-2026-72900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the pqm create queue function when MES is enabled. If the amdgpu amdkfd alloc kernel mem function fails during the initial queue creation for a process, the...

PT-2026-72365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Error paths within the damon sysfs access pattern add dirs and damon sysfs scheme add dirs functions release directory references in the incorrect order. Specifically, in access pattern...