Linux Distros Unpatched Vulnerability : CVE-2026-74634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is...

Linux Distros Unpatched Vulnerability : CVE-2026-74636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix race between updateeventfields and, eventdefinefields The following sequence may leads race between eventdefinefields and updateeventfields: CPU0...

Linux Distros Unpatched Vulnerability : CVE-2026-74631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of ea...

Linux Distros Unpatched Vulnerability : CVE-2026-74644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages...

Linux Distros Unpatched Vulnerability : CVE-2026-74611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: rx: restore msgiter before TLS 1.3 optimistic retry tlsdecryptsg advances msg-msgiter when it maps user pages for the optimistic TLS 1.3 zero-copy path. If...

Linux Distros Unpatched Vulnerability : CVE-2026-74671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart =...

Linux Distros Unpatched Vulnerability : CVE-2026-74680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the...

Linux Distros Unpatched Vulnerability : CVE-2026-74676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl...

Linux Distros Unpatched Vulnerability : CVE-2026-74682

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter:...

Linux Distros Unpatched Vulnerability : CVE-2026-74722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix memory leak in btrfsdoencodedwrite Local fuzzing of 6.12.94 has found the following memory leak: Unreferenced object 0xffff888018050a80 size 64: comm...

Linux Distros Unpatched Vulnerability : CVE-2026-74700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter...

Linux Distros Unpatched Vulnerability : CVE-2026-74672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series mm: fix UAF caused by race between ptdump and vmap pgtable freeing, v6. Kernel pag...

Linux Distros Unpatched Vulnerability : CVE-2026-74717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: fwtracer, return NULL on create error Tracer creation can fail by returning either NULL or ERRPTR. The return value is stored without a check on the...

Linux Distros Unpatched Vulnerability : CVE-2026-74714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: tcp: Fix use-after-free in bpfitertcpestablishedbatch reqskqueuehashreq publishes a TCPNEWSYNRECV requestsock onto the ehash chain, drops the bucket lock,...

Linux Distros Unpatched Vulnerability : CVE-2026-74725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - enic: fix txhangreset use-after-free on device removal enicremove cancels the reset and changemtuwork items but does not cancel txhangreset. A TX timeout that...

Linux Distros Unpatched Vulnerability : CVE-2026-74693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject...

Linux Distros Unpatched Vulnerability : CVE-2026-74691

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling...

PT-2026-79588

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: zero shared page before exposing to userspace bnxt re alloc ucontext allocates uctx-shpg via get free pageGFP KERNEL. The buddy allocator does not zero pages without GFP ZERO, so the page contains stale kernel data...

Linux Distros Unpatched Vulnerability : CVE-2026-74612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area,...

SUSE SLED15 / SLES15 Security Update : rsync (SUSE-SU-2026:3657-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3657-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist...