Linux Distros Unpatched Vulnerability : CVE-2026-74422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/rockchip: inno-hdmi: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering...

Linux Distros Unpatched Vulnerability : CVE-2026-72034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fhandle: reject detached mounts in capablewrtmount The recent fhandle RCU fix moved the mount namespace capability check into capablewrtmount, so a non-NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-74265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the...

Linux Distros Unpatched Vulnerability : CVE-2026-74262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kcm: use WRITEONCE when changing lower socket callbacks kcmattach replaces a live lower TCP socket's skdataready and skwritespace callbacks with KCM handlers, a...

Linux Distros Unpatched Vulnerability : CVE-2026-72054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They...

Linux Distros Unpatched Vulnerability : CVE-2026-72491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while...

CVE-2026-72136

A flaw was found in the Linux kernel's xfrminterface component. A local attacker with specific network administration privileges in one network namespace could exploit this vulnerability to modify the configuration of a network interface in a different network namespace where they are not...

CVE-2026-72135

A flaw was found in the Linux kernel's Trusted Platform Module TPM character devices. These devices, intended for sequential command processing, incorrectly allow positional input/output I/O operations. A local attacker can exploit this by using a large offset in a positional read operation,...

CVE-2026-72134

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI driver for i.MX systems. When a Direct Memory Access DMA transfer cannot be started, the system attempts to use a Programmed Input/Output PIO transfer instead. However, the SPI controller is not correctly reconfigured for PIO...

CVE-2026-72133

A flaw was found in the Linux kernel's spi: uniphier driver. The driver attempts to use an internal synchronization mechanism before it has been properly set up. If an interrupt occurs at a precise moment, the system may try to operate on this uninitialized mechanism, leading to unpredictable...

CVE-2026-72132

A flaw was found in the Linux kernel's Network File System NFS component. The nfsfoliomarkunstable and nfsfolioclearcommit functions incorrectly account for unstable writes, charging the full folio size for each sub-folio request. This inflated accounting can push the system's dirty page threshol...

CVE-2026-72131

A flaw was found in the Linux kernel's nvme-apple driver affecting Apple A11 devices. This vulnerability occurs when Non-Volatile Memory Express NVMe command tags are not unique across the administrative and input/output queues. An attacker could exploit this by sending specially crafted commands...

CVE-2026-72129

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

vcheck v1.6.3

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

CVE-2026-72128

A flaw was found in the nvmet NVMe over Fabrics target component of the Linux kernel. This vulnerability occurs in the nvmetsqcreate function, where a reference to a controller object is not properly released if a specific check fails. An attacker could potentially exploit this reference count le...

CVE-2026-72126

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability arises from a race condition where the isotprelease function can cancel a timer while it is still actively being used by isotprcv. This can lead to a use-after-free condition, which a local...

CVE-2026-72125

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP protocol. A memory corruption vulnerability, specifically a use-after-free race condition, can occur during the unregistration of a network device. This happens when the system attempts to free a socket while a CAN filter...

CVE-2026-72124

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP transport protocol module. A race condition in the transmit TX state machine allows for unsynchronized state transitions. This can lead to a situation where a frame or timer callback operates on an outdated state, resulting...

CVE-2026-72123

A use-after-free flaw was found in the Linux kernel's CAN BCM Broadcast Manager subsystem. During RX operation teardown, a concurrent receive handler can race and re-arm the throttle timer after the operation has been scheduled for deallocation. When the deallocation completes, the timer is still...

CVE-2026-72122

A flaw was found in the CAN BCM Controller Area Network Broadcast Manager module of the Linux kernel. A race condition exists where a socket intended for a specific CAN interface can silently be reconfigured to receive messages from any interface. This occurs due to inconsistent reads of socket...