PT-2026-72633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio qcom component where the subs-opened variable is set before the service interval is validated during the enable process. If an invalid interval is...

PT-2026-72648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor module where the aa change profile function utilizes fn label build in scope to create a replacement label before performing a no new privs subset check. ...

PT-2026-72822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvmet-tcp module. In the nvmet tcp alloc queue function, if a connection is closed during the allocation process for example, when nvmet tcp set queue sock...

Linux Distros Unpatched Vulnerability : CVE-2026-72144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad...

Linux Distros Unpatched Vulnerability : CVE-2026-74502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew err...

CVE-2026-72479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

PT-2026-72440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation failure in the netfilter module can cause a cloned nft pipapo match structure to enter an inconsistent state. This occurs when lookup tables are partially resized, bi...

PT-2026-72215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the irqchip/irq-riscv-imsic-early component. The function imsic early acpi init allocates a firmware node before initializing the IMSIC state. If the imsic setup...

CVE-2026-72453: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

PT-2026-72185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the powerpc/uaccess component, the mask user address function incorrectly checks for CONFIG E500 instead of CONFIG PPC E500. This error prevents the mask user address isel function fr...

PT-2026-72228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the bnx2x alloc mem bp function. The issue occurs when the allocation of fpi.tpa info fails, causing the error path to fail to free the previously allocated struc...

PT-2026-72496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp port lag join function. When the mlxsw sp port lag index get function fails, the system returns an error without releasing the lag reference...

PT-2026-72791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the info-node RB-tree member is zero-initialized via kzalloc. When a device does not support ATS Address Translation Services, the devic...

PT-2026-72433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference leak exists in the host1x device parse dt error path. In host1x device add, if host1x device parse dt fails, the error path uses kfreedevice to free the object directl...

CVE-2026-72099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hashoffset twice hashoffset is already incremented in the loop "for i = 0; i tocopy; i++, ts--". Do not increment it again...

CVE-2026-72371: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFSVOLUMERMTREE is set on Fix afsinsertvolumeintocell to set AFSVOLUMERMTREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be...

CVE-2026-72378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration...

PT-2026-72458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the fbdev s3fb component. In the s3 pci probe function, memory allocated for modelist via the fb videomode to modelist function is not properly released during...

PT-2026-72452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the tridentfb component of the fbdev subsystem. In the trident pci probe function, memory allocated for modelist via the fb videomode to modelist function is not...

PT-2026-72418

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the batadv frag send packet function fails to properly handle socket buffers skb during pre-checks for empty payloads or zero fragment size...