PT-2026-72453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvidiafb probe function. The memory allocated for modelist within the nvidia set fbinfo function is not properly released during subsequent error paths...

PT-2026-72365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Error paths within the damon sysfs access pattern add dirs and damon sysfs scheme add dirs functions release directory references in the incorrect order. Specifically, in access pattern...

PT-2026-72404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the remoteproc qcom component. The qcom add minidump segments function fails to free the allocated name of the minidump region when an error occurs before the...

PT-2026-72825

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/hns component where the hns roce cmd mbox function, which serves as the command interface between the driver and hardware, can trigger unlimited error printin...

PT-2026-72373

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN ON for resident attribute in ntfs map runlist nolock When ntfs map runlist nolock needs to look up the attribute extent containing a target VCN ctx needs reset == true, it calls ntfs attr lookup and then expects th...

PT-2026-72762

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcim iomap region or devm kmemdup fail, the code returns directly without cleaning up previously allocated resources: - mt76 device allocated by mt76 alloc device - p...

CVE-2026-74355: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...

PT-2026-72611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where conntrack lookup and allocation kfuncs kernel functions process an opts pointer and an opts sz argument. While the verifier only checks the...

PT-2026-72757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid pointer dereference occurs in the btrfs module within the btrfs run delayed refs function. The issue arises when the btrfs select ref head function returns an error pointer...

PT-2026-72804

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ath12k wifi driver. In the ath12k wifi7 dp rx h verify tkip mic function, a call to ath12k dp rx check nwifi hdr len valid may return false if the NWIFI heade...

PT-2026-105068

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag...

CVE-2026-72479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

PT-2026-72285

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm-verity component, the error counter v-corrupted errs is not atomic, which makes it susceptible to race conditions. This issue may result in the system skipping the call to the ...

PT-2026-72185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the powerpc/uaccess component, the mask user address function incorrectly checks for CONFIG E500 instead of CONFIG PPC E500. This error prevents the mask user address isel function fr...

PT-2026-72256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpuhp invoke callback function where the system unwinds earlier callbacks for the same hotplug state when an instance fails. Because the rollback path reuses the r...

PT-2026-72495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp vrs lpm tree replace function. When this function fails after replacing some Virtual Routers VRs, the error rollback loop fails to update th...

PT-2026-72464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the metronomefb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is n...

PT-2026-72496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp port lag join function. When the mlxsw sp port lag index get function fails, the system returns an error without releasing the lag reference...

PT-2026-72822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvmet-tcp module. In the nvmet tcp alloc queue function, if a connection is closed during the allocation process for example, when nvmet tcp set queue sock...

PT-2026-72248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the t7xx cldma late init function. The function creates md ctrl-gpd dmapool before initializing the TX and RX rings. If the initialization of any ring fails, the...