CVE-2026-74636 tracing: Fix race between update_event_fields and, event_define_fields

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between updateeventfields and, eventdefinefields The following sequence may leads race between eventdefinefields and updateeventfields: CPU0 loads module A CPU1 loads module B ===============================...

EUVD-2026-64555

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinary file descriptor. Nothing ties the task that calls...

CVE-2026-74613

CVE-2026-74613 is a use-after-free in the Linux kernel's vsock/virtio transport (net/vmw_vsock/virtio_transport.c). A prior commit (b917507e5ad9) made the RX worker jump to a common exit path when rx_run is clear, but that path still refills the RX queue when the buffer count is low. Work queued ...

EUVD-2026-64550

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

CVE-2026-74613 vsock/virtio: avoid refilling the RX queue after teardown

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

SUSE CVE-2026-68289

In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream In tipcrecvmsg, the copy length is computed as: copy = mintint, dlen - offset, buflen; buflen is sizet but mintint, ... casts it to int. When buflen exceeds INTMAX e.g...

SUSE CVE-2026-72322

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists between device teardown and incoming MLD query processing, leading to a Use-After-Free in the MLD delayed work. During device destruction, the primary...

SUSE CVE-2026-72323

In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown inetdevdestroy and incoming IGMP query processing igmprcv, leading to a Use-After-Free in the IGMP timer callback. During device...

PT-2026-79720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF conntrack kfuncs where the opts argument can point to a shared map value. The functions bpf nf ct lookup and bpf nf ct alloc entry read the opts-netns id...

Linux Distros Unpatched Vulnerability : CVE-2026-74657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: Fix fibnlmsgsize for RTAVIA nexthops fibnlmsgsize still estimates nexthop space as if every gateway is encoded as an IPv4 RTAGATEWAY attribute. IPv4 route...

CVE-2026-74657: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fibnlmsgsize for RTAVIA nexthops fibnlmsgsize still estimates nexthop space as if every gateway is encoded as an IPv4 RTAGATEWAY attribute. IPv4 routes can also carry an IPv6 gateway, which fibnexthopinfo dumps as RTAVI...

PT-2026-79641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the event define fields and update event fields functions. This occurs when one CPU loads a module and executes event define fields while another CPU...

PT-2026-79618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the vsock/virtio component of the Linux kernel. The RX worker continues to refill the RX queue when the buffer count is low, even after the rx run...

PT-2026-79662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fib nlmsg size function where nexthop space is incorrectly estimated by assuming every gateway is encoded as an IPv4 RTA GATEWAY attribute. Because IPv4 routes can...

PT-2026-79708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component when T10 PI Protection Information is negotiated. The system splits protection bytes from the data iterator before mapping request scatterlist...

CVE-2026-74618: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinary file descriptor. Nothing ties the task that calls...

CVE-2026-74657: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fibnlmsgsize for RTAVIA nexthops fibnlmsgsize still estimates nexthop space as if every gateway is encoded as an IPv4 RTAGATEWAY attribute. IPv4 routes can also carry an IPv6 gateway, which fibnexthopinfo dumps as RTAVI...

CVE-2026-74702: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

CVE-2026-74715: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and bpfnfctallocentry read opts-netnsid separately when acquiring and releasing t...

Linux Distros Unpatched Vulnerability : CVE-2026-74636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix race between updateeventfields and, eventdefinefields The following sequence may leads race between eventdefinefields and updateeventfields: CPU0...