CVE-2026-72031 ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD Phison PS3111-S11, DRAM-less drops off the bus after entering Device-Initiated Slumber during idle. With the default medpowerwithdipm policy the link...

CVE-2026-72023 octeontx2-pf: fix SQB pointer leak on init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

CVE-2026-72023 octeontx2-pf: fix SQB pointer leak on init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

EUVD-2026-58981

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

EUVD-2026-59107

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECTCTL domains, but only after checking if the...

CVE-2026-72008

The CVE-2026-72008 entry describes a Mediatek power-domain issue in the Linux kernel where HWV domain probe/cleanup paths could perform power-domain checks incorrectly. Specifically, for HW_VOTER type domains, cleanup for DIRECT_CTL domains ran without confirming the target is powered on, using D...

CVE-2026-72005 wifi: rt2x00: avoid full teardown before work setup in probe

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

CVE-2026-72005 wifi: rt2x00: avoid full teardown before work setup in probe

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

CVE-2026-72004 wifi: mac80211: fix memory leak in ieee80211_register_hw()

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix memory leak in ieee80211registerhw If kmemdup fails while copying supported band structures, the error path jumps to failrate. This skips ratecontroldeinitialize and leaks the initialized local-ratectrl. Fix...

EUVD-2026-59097

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxiresetinit, when ioremap fails, the memory region obtained via requestmemregion is not released, leading to a resource leak. Add an errmemregion label to properly...

CVE-2026-68475 reset: sunxi: fix memory region leak on ioremap failure

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxiresetinit, when ioremap fails, the memory region obtained via requestmemregion is not released, leading to a resource leak. Add an errmemregion label to properly...

CVE-2026-68475

Mode C: The CVE-2026-68475 entry concerns a Linux kernel sunxi reset path. In sunxi_reset_init(), if ioremap() fails, the memory region obtained with request_mem_region() is not released, causing a resource leak. The fix adds an err_mem_region label to properly release that memory region before f...

CVE-2026-68475 reset: sunxi: fix memory region leak on ioremap failure

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxiresetinit, when ioremap fails, the memory region obtained via requestmemregion is not released, leading to a resource leak. Add an errmemregion label to properly...

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

...

EUVD-2026-58824

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...

PT-2026-72628

In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes pending and barrier reference leaks on write failures raid1 make request acquires a writes pending reference with md write start before calling raid1 write request. Several failure paths in raid1 write reques...

PT-2026-72447

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls of reserved mem device init and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory...

PT-2026-72271

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct hw io abort When efct hw reqtag alloc fails in efct hw io abort, the error path returns -ENOSPC without releasing the reference obtained via kref get unless zero earlier in the function...

PT-2026-72262

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300 delete freeing the mmc host when the last reference is dropped. The probe error path after th...

PT-2026-72601

In the Linux kernel, the following vulnerability has been resolved: sctp: fix err chunk memory leaks in INIT handling When sctp verify init encounters unrecognized parameters, it allocates an err chunk to report them. However, this chunk is leaked in several code paths: 1. In sctp sf do 5 1B init...