PT-2026-72601

In the Linux kernel, the following vulnerability has been resolved: sctp: fix err chunk memory leaks in INIT handling When sctp verify init encounters unrecognized parameters, it allocates an err chunk to report them. However, this chunk is leaked in several code paths: 1. In sctp sf do 5 1B init...

Linux Distros Unpatched Vulnerability : CVE-2026-72252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftsetpipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nftpipapomatch can enter a bad state: - some field...

PT-2026-72852

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeon ring restore on lock failure radeon ring restore takes ownership of the data buffer allocated by radeon ring backup. The caller radeon gpu reset only frees it in the non-restore branch; in th...

PT-2026-72504

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata open metadata open returns NULL when kzalloc obj fails, but the caller era ctr only checks IS ERRmd. Since IS ERRNULL returns false, the NULL pointer is treated as a valid result a...

PT-2026-72627

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes pending leak on write request failures raid10 make request acquires a writes pending reference with md write start before dispatching write requests. Several failure paths in raid10 write request complete th...

Linux Distros Unpatched Vulnerability : CVE-2026-72202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: avoid heap allocation for free-cluster readahead state getnrfreeclusters allocates a temporary filerastate before it publishes the precomputed free cluste...

Linux Distros Unpatched Vulnerability : CVE-2026-72440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1: fix writespending and barrier reference leaks on write failures raid1makerequest acquires a writespending reference with mdwritestart before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-72438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: fix writespending and barrier reference leaks on discard failures raid10makerequest acquires a writespending reference with mdwritestart before calli...

PT-2026-72834

In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad failure when state is no longer POSTDAD addrconf dad failure transitions ifp-state from DAD to POSTDAD via addrconf dad end, which drops ifp-lock on return. The lock is re-acquired after net info...

PT-2026-72626

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes pending and barrier reference leaks on discard failures raid10 make request acquires a writes pending reference with md write start before calling raid10 handle discard. Several failure paths in raid10 handl...

PT-2026-72298

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5 register notifier blocks registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path...

PT-2026-72647

In the Linux kernel, the following vulnerability has been resolved: apparmor: aa label alloc use aa label free on alloc failure aa label alloc allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any...

PT-2026-72187

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxi reset init, when ioremap fails, the memory region obtained via request mem region is not released, leading to a resource leak. Add an err mem region label to proper...

PT-2026-72934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the folio split function. The function continues to dereference the mapping after a split occurs, specifically during the...

PT-2026-72655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rpcrdma xprt connect function ignores the return value of frwr wp create. The frwr wp create function is responsible for creating a singleto...

PT-2026-72499

In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe vm madvise ioctl allocates madvise range.vmas in get vmas. After get vmas succeeds with at least one VMA, error paths must go through free vmas so the array is released before...

PT-2026-72297

In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure reserve metadata snap and release metadata snap modify the superblock's held root directly in the block manager's buffer. If the subsequent metadata commit...

PT-2026-72994

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio queue ENOMEM in writeback by adding a mempool Fix the handling of folio queue allocation failure in writeback by adding a mempool and passing in gfp t flags to the rolling buffer functions that allocate memory,...

Linux Distros Unpatched Vulnerability : CVE-2026-72205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: free volume-wide resources on fillsuper failure ntfsfillsuper's erroutnow path frees only the volume struct via kfreevol, leaving several vol-owned...

PT-2026-72359

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register device links a new slram mtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtd device register fails, the...