CVE-2026-72204: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

PT-2026-72387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where resident $INDEX ROOT values are not fully validated during lookup. The index header fields, which are consumed by callers after lookup, lacked...

CVE-2026-72251: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

PT-2026-72484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ife decode function where it may return after making only the outer IFE header and metadata pullable. When the decapsulated packet is subsequently passed to eth ty...

CVE-2026-72251: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

PT-2026-72415

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the batman-adv module. The issue occurs when accessing the num dests field of the struct batadv tvlv mcast tracker because the system uses offsetof instea...

PT-2026-72437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable component when pushing the IPIP header. The system incorrectly uses the route of the opposite direction to calculate the headroom instead of th...

PT-2026-72208

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.0 Description An issue exists in the macsec encrypt function where the Ethernet header is read via eth hdrskb to move source and destination MAC bytes forward for SecTAG placement. On the AF PACKET SOCK RAW + PACKET QDIS...

CVE-2026-72046: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a per-buffer-queue-descriptor headerbufaddr at post time and reads the split header back at completion time. Both the post and the read...

PT-2026-72423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the batman-adv module. The function pskb may pull within batadv interface rx can reallocate the buffer behind the socket buffer skb. While the VLAN heade...

PT-2026-72394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where index block headers are not strictly validated. The fix involves modifying the ntfs index block inconsisent function to implement stricter...

CVE-2026-72296: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes the decapsulated packet to ethtypetrans, which expects the inner...

CVE-2026-68477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...

PT-2026-72188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipvs component where the ip vs get out rt function calls skb ensure writable, which can lead to the reallocation of skb-head. This necessitates reloading the IP...

PT-2026-72605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable component where the nf flow ip4 tunnel proto function fails to validate the iph-ihl field. This lack of sanity checking when computing the head...

CVE-2026-15689: Weak Password Recovery Mechanism for Forgotten Password

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

PT-2026-73031

Name of the Vulnerable Software and Affected Versions Dancer2::Plugin::Auth::Extensible versions prior to 0.714 Description Password reset link poisoning is possible via the request Host header in the default email password reset and default welcome send functions. Both default emails generate a...

PT-2026-72960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth HIDP implementation where the functions hidp recv ctrl frame and hidp recv intr frame read skb-data0 before verifying that the L2CAP SDU contains a...

CVE-2026-72319: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskbpull we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom f...

CVE-2026-68477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause...