Linux Distros Unpatched Vulnerability : CVE-2026-74627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: devmem: prevent net-iov / page mixing We should either have netiov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow...

Linux Distros Unpatched Vulnerability : CVE-2026-74650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB read in WMMparamhandler WMMparamhandler copies a fixed-size WMM parameter element out of a received information element without...

Linux Distros Unpatched Vulnerability : CVE-2026-74691

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-74613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 vsock/virtio: stop workers during the .remove made the RX worker jump to its commo...

Linux Distros Unpatched Vulnerability : CVE-2026-74711

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pmbus Fix type confusion in notification logic Sashiko reports: At the start of the loop in pmbusnotify, the code unconditionally casts every attribute ...

Linux Distros Unpatched Vulnerability : CVE-2026-74672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series mm: fix UAF caused by race between ptdump and vmap pgtable freeing, v6. Kernel pag...

Linux Distros Unpatched Vulnerability : CVE-2026-74644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages...

Linux Distros Unpatched Vulnerability : CVE-2026-74632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: fix hugezeropfn race Patch series mm/hugememory: fix hugezeropfn race, v2. There is a subtle race in the reference-counted hugezerofolio...

Linux Distros Unpatched Vulnerability : CVE-2026-74682

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter:...

Linux Distros Unpatched Vulnerability : CVE-2026-74631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of ea...

Linux Distros Unpatched Vulnerability : CVE-2026-74636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix race between updateeventfields and, eventdefinefields The following sequence may leads race between eventdefinefields and updateeventfields: CPU0...

Linux Distros Unpatched Vulnerability : CVE-2026-74618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinar...

Linux Distros Unpatched Vulnerability : CVE-2026-74685

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64:...

Linux Distros Unpatched Vulnerability : CVE-2026-74639

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: us144mkii: re-anchor capture URBs on resubmission captureurbcomplete resubmits each capture URB without anchoring it: usbgeturburb %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-74664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: reallocate update replies for mismatched IDs ovsflowcmdnew preallocates the optional reply skb before it takes ovsmutex and before it knows...

Linux Distros Unpatched Vulnerability : CVE-2026-74586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCON...

Linux Distros Unpatched Vulnerability : CVE-2026-74640

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: fix OOB write in fcpmeterctlget fcpioctlsetmetermap bounds the user-supplied Level Meter map size by the driver's own limit of 255 if map.mapsize 25...

Linux Distros Unpatched Vulnerability : CVE-2026-74714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: tcp: Fix use-after-free in bpfitertcpestablishedbatch reqskqueuehashreq publishes a TCPNEWSYNRECV requestsock onto the ehash chain, drops the bucket lock,...

Linux Distros Unpatched Vulnerability : CVE-2026-74653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is...

PT-2026-79703

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e queue start deactivates and re-activates all channels but closes only the queue being restarted. mlx5e activate txqsq then unconditionally calls netdev tx reset queue, zeroing th...