Linux Distros Unpatched Vulnerability : CVE-2026-72110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this ca...

Linux Distros Unpatched Vulnerability : CVE-2026-74493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a...

Linux Distros Unpatched Vulnerability : CVE-2026-72111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reset register bounds before narrowing retval range in checkmemaccess When the BPF verifier processes a context load of an LSM hook return value, it calls...

Linux Distros Unpatched Vulnerability : CVE-2026-72444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flowdissector: check device type before reading ETHADDRS skbflowdissect unconditionally reads 12 bytes from ethhdrskb when FLOWDISSECTORKEYETHADDRS is requested...

PT-2026-72196

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata1: ERR050531: VPU NOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a...

PT-2026-72504

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata open metadata open returns NULL when kzalloc obj fails, but the caller era ctr only checks IS ERRmd. Since IS ERRNULL returns false, the NULL pointer is treated as a valid result a...

PT-2026-72853

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon align pitch radeon align pitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed...

PT-2026-72861

In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path now attaches the server record to an incoming call through the rxrpc peer's app data. That association is not guaranteed to exist...

PT-2026-72811

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is suspended befo...

PT-2026-72551

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio needs to be redirtied and unlocked before the terminal writeback ite...

PT-2026-72516

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna umap lifetime race amdxdna umap release calls the blocking mmu interval notifier remove before removing the object from abo-mem.umap list. If aie2 populate range runs concurrently, it may obta...

PT-2026-72684

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: Proper rollback if the ioremap fails bnxt qplib alloc dpi returns success even if ioremap fails. Add the proper rollback when the ioremap fails and return -ENOMEM status...

PT-2026-72685

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Adding a max and min check and fail if user supplied value is more than...

PT-2026-72727

In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser paths validate these fields with bounded strnlen checks before using them...

PT-2026-72224

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch taprio: Replace direct dequeue call with peek and qdisc dequeue peeked When taprio's software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gso skb; taprio dequeue from txq...

PT-2026-72674

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the snd sof dev object that the mailbox client mtk-adsp-ipc reaches via chan-cl-r...

PT-2026-72690

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO BY FRAGS 0xFFFF When MTU is large, ip6 default advmss can return IPV6 MAXPLEN 65535. This is interpreted by TCP as mss clamp, allowing the MSS to reach 65535. However, 0xFFFF is...

PT-2026-72520

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctx sync debug bo amdxdna hwctx sync debug bo invokes the hardware hwctx sync debug bo callback while holding xdna-dev lock. The callback may call amdxdna cmd submit, which in turn...

PT-2026-72670

In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor busy in command ioctl commit d1857f8296dc "gpib: fix use-after-free in IO ioctl handlers" introduced a descriptor busy reference counter to pin struct gpib descriptor across IO ioctl...

PT-2026-72244

In the Linux kernel, the following vulnerability has been resolved: net: ip6 vti: require CAP NET ADMIN in the device netns for changelink vti6 changelink operates on at most two netns, dev netdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other...