PT-2026-79737

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110 set avmute Some older DCE timing generators do not implement is tg enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereferen...

PT-2026-79718

In the Linux kernel, the following vulnerability has been resolved: vhost iotlb: bound map allocation in add range vhost iotlb add range ctx only retires an old entry when the table has a non-zero limit, has exactly reached that limit and has VHOST IOTLB FLAG RETIRE set. Non-retiring tables can...

Linux Distros Unpatched Vulnerability : CVE-2026-74715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and...

PT-2026-79618

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rx run is clear. That exit still refills the RX queue...

PT-2026-79609

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermal add hwmon sysfs by removing...

PT-2026-79645

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcp meter ctl get fcp ioctl set meter map bounds the user-supplied Level Meter map size by the driver's own limit of 255 if map.map size 255 || map.meter slots 255 return -EINVAL; and passes it to fcp...

Linux Distros Unpatched Vulnerability : CVE-2026-74663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. ...

Linux Distros Unpatched Vulnerability : CVE-2026-74676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl...

PT-2026-79728

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in lzo...

Linux Distros Unpatched Vulnerability : CVE-2026-74722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix memory leak in btrfsdoencodedwrite Local fuzzing of 6.12.94 has found the following memory leak: Unreferenced object 0xffff888018050a80 size 64: comm...

PT-2026-79725

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjust ptr min max vals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragil...

PT-2026-79715

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...

PT-2026-79736

In the Linux kernel, the following vulnerability has been resolved: sched ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scx link sched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs...

PT-2026-79640

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit cursor bit cursor fetches the glyph under the cursor with c = scr readwvc pos; src = vc font.data + c & charmask w height; where charmask is 0x1ff when vc hi font mask is set. The...

PT-2026-79688

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index passed to EVIOCGMASK / EVIOCSMASK ioctls is used to index the static counts array in evdev get mask cnt and client evmasks arra...

PT-2026-79697

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race between smc listen out and listener close smc listen out reads lsmc-sk.sk state without the listener lock, then acquires lock sock nested only after the check passes. This opens a window where smc close...

PT-2026-79719

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf iter tcp established batch reqsk queue hash req publishes a TCP NEW SYN RECV request sock onto the ehash chain, drops the bucket lock, and only afterwards sets rsk refcnt to 3. Lockless readers...

Linux Distros Unpatched Vulnerability : CVE-2026-74619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovl: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinary file...

Linux Distros Unpatched Vulnerability : CVE-2026-74725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - enic: fix txhangreset use-after-free on device removal enicremove cancels the reset and changemtuwork items but does not cancel txhangreset. A TX timeout that...