PT-2026-72959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth HIDP HID over SDP implementation where the hidp process data function fails to validate the payload of numbered reports. When hidp get raw report waits f...

CVE-2026-72406: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

PT-2026-72594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the sungem network driver. When the register netdev function fails, the gem init one function calls gem remove one, which unregisters and frees resources...

PT-2026-72412

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs during the initialization of the Block Translation Table BTT in the nvdimm module. Specifically, arenas allocated by the discover arenas or create arenas functions a...

PT-2026-72633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio qcom component where the subs-opened variable is set before the service interval is validated during the enable process. If an invalid interval is...

PT-2026-72648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor module where the aa change profile function utilizes fn label build in scope to create a replacement label before performing a no new privs subset check. ...

PT-2026-72822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvmet-tcp module. In the nvmet tcp alloc queue function, if a connection is closed during the allocation process for example, when nvmet tcp set queue sock...

Linux Distros Unpatched Vulnerability : CVE-2026-72144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad...

Linux Distros Unpatched Vulnerability : CVE-2026-74502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew err...

CVE-2026-72479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

PT-2026-72440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation failure in the netfilter module can cause a cloned nft pipapo match structure to enter an inconsistent state. This occurs when lookup tables are partially resized, bi...

PT-2026-72215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the irqchip/irq-riscv-imsic-early component. The function imsic early acpi init allocates a firmware node before initializing the IMSIC state. If the imsic setup...

CVE-2026-72453: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

PT-2026-72185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the powerpc/uaccess component, the mask user address function incorrectly checks for CONFIG E500 instead of CONFIG PPC E500. This error prevents the mask user address isel function fr...

PT-2026-72228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the bnx2x alloc mem bp function. The issue occurs when the allocation of fpi.tpa info fails, causing the error path to fail to free the previously allocated struc...

PT-2026-72496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp port lag join function. When the mlxsw sp port lag index get function fails, the system returns an error without releasing the lag reference...

PT-2026-72791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the info-node RB-tree member is zero-initialized via kzalloc. When a device does not support ATS Address Translation Services, the devic...

PT-2026-72433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference leak exists in the host1x device parse dt error path. In host1x device add, if host1x device parse dt fails, the error path uses kfreedevice to free the object directl...

CVE-2026-72099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hashoffset twice hashoffset is already incremented in the loop "for i = 0; i tocopy; i++, ts--". Do not increment it again...

CVE-2026-72371: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFSVOLUMERMTREE is set on Fix afsinsertvolumeintocell to set AFSVOLUMERMTREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be...