PT-2026-72611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where conntrack lookup and allocation kfuncs kernel functions process an opts pointer and an opts sz argument. While the verifier only checks the...

PT-2026-72757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid pointer dereference occurs in the btrfs module within the btrfs run delayed refs function. The issue arises when the btrfs select ref head function returns an error pointer...

PT-2026-72804

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ath12k wifi driver. In the ath12k wifi7 dp rx h verify tkip mic function, a call to ath12k dp rx check nwifi hdr len valid may return false if the NWIFI heade...

PT-2026-105068

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag...

PT-2026-72285

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm-verity component, the error counter v-corrupted errs is not atomic, which makes it susceptible to race conditions. This issue may result in the system skipping the call to the ...

PT-2026-72185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the powerpc/uaccess component, the mask user address function incorrectly checks for CONFIG E500 instead of CONFIG PPC E500. This error prevents the mask user address isel function fr...

PT-2026-72256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpuhp invoke callback function where the system unwinds earlier callbacks for the same hotplug state when an instance fails. Because the rollback path reuses the r...

PT-2026-72495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp vrs lpm tree replace function. When this function fails after replacing some Virtual Routers VRs, the error rollback loop fails to update th...

PT-2026-72464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the metronomefb probe function within the fbdev component. The issue occurs because memory allocated for pagerefs during the execution of fb deferred io init is n...

PT-2026-72496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp port lag join function. When the mlxsw sp port lag index get function fails, the system returns an error without releasing the lag reference...

PT-2026-72822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nvmet-tcp module. In the nvmet tcp alloc queue function, if a connection is closed during the allocation process for example, when nvmet tcp set queue sock...

PT-2026-72248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the t7xx cldma late init function. The function creates md ctrl-gpd dmapool before initializing the TX and RX rings. If the initialization of any ring fails, the...

PT-2026-72549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the hw engine init function. The error path explicitly frees a Buffer Object BO allocated with xe managed bo create pin map using the xe bo unpin map no vm...

PT-2026-72433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference leak exists in the host1x device parse dt error path. In host1x device add, if host1x device parse dt fails, the error path uses kfreedevice to free the object directl...

PT-2026-72478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the KVM s390 PCI component during AIF enable failure. The function kvm s390 gisc register registers the guest ISC before pinning guest interrupt forwardi...

PT-2026-72411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvdimm/btt component when arena discovery fails. Specifically, memory allocated by the functions btt freelist init, btt rtt init, and btt maplocks init is not...

PT-2026-72618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the tcf ct fill params function. When TCA CT LABELS is present, the function calls nf connlabels get, but two error paths utilize a bare...

PT-2026-72810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid1 and raid10 components where error-path detection fails when relying on r1 bio in raid1 or r10 bio-read slot in raid10, as these may be NULL or -1 after a...

Linux Distros Unpatched Vulnerability : CVE-2026-74375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bio while handling a read error. In this case,...

Linux Distros Unpatched Vulnerability : CVE-2026-74502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew err...