CVE-2026-74466: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions custom...

PT-2026-72743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular lock dependency exists in the ext4 filesystem when using the EXT4 IOC MOVE EXT ioctl. The issue occurs because the validation to ensure the donor file belongs to the same...

PT-2026-72279

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/amdxdna component where the amdxdna drm sync bo ioctl function incorrectly passes abo-client to amdxdna hwctx sync debug bo during a SYNC DIRECT FROM DEVICE...

PT-2026-72499

In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe vm madvise ioctl allocates madvise range.vmas in get vmas. After get vmas succeeds with at least one VMA, error paths must go through free vmas so the array is released before...

CVE-2026-72483: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function handles USB hub class requests to the virtual root hub. In the default branches of both the ClearPortFeature and SetPortFeature switc...

PT-2026-72918

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/zcrypt component where a user-controlled domain value is extracted from a CCA or EP11 ioctl struct during the preparation of a CPRB. Under specific conditions...

PT-2026-72295

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the dm-ioctl component. The list version get info function incorrectly uses sizeoftt-version, which is 12 bytes, while writing 16 bytes into the output buffer...

PT-2026-72280

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the drm sched worker of the Linux kernel. The issue occurs when amdxdna drm submit execbuf passes a user-supplied command BO handle to amdxdna cmd...

Linux Distros Unpatched Vulnerability : CVE-2026-74467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/qeth: Check CAPNETADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE and SIOCQETHQUERYOAT with...

Linux Distros Unpatched Vulnerability : CVE-2026-72106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-ioctl: fix a possible overflow in listversiongetinfo sizeoftt-version is 12 bytes, but the code writes 16 bytes into the output buffer - info-vers-version0,...

PT-2026-72326

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xen/gntdev component where the gntdev ioctl map grant ref function fails to release a reference acquired by gntdev alloc map when it cannot copy the operation resu...

PT-2026-72670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpib module. In the command ioctl function, an error path inside a loop decrements the descriptor busy reference counter and breaks, but execution...

PT-2026-72919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Unprivileged users can invoke private ioctl commands because the system fails to verify the CAP NET ADMIN capability. This affects the SIOCDEVPRIVATE ioctl commands SIOC QETH ADP SET SNM...

PT-2026-72967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 pci component where the MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. This leads to a condition where...

PT-2026-72498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the SMB client during the validation of the PASSTHRU FSCTL response payload within the smb2 ioctl query info function. The issue occurs because the...

PT-2026-72281

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdxdna cmd submit function where it unconditionally calls xdna-dev info-ops-cmd submit. While aie2 dev ops defines this callback, aie4 vf ops the AIE4 SR-IOV...

PT-2026-72167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the liveupdate component where session ioctls are not properly validated against session types. Specifically, the PRESERVE FD operation is only applicable to outgoing...

Linux Distros Unpatched Vulnerability : CVE-2026-74440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xeexecioctl only added the VM's dma-resv KERNEL slot as a dependency. That slo...

PT-2026-72482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the LoongArch architecture, the kvm vcpu ioctl interrupt function can be called from userspace without proper validation of the interrupt request irq. This lack of validity checking...

Linux Distros Unpatched Vulnerability : CVE-2026-74307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as t...