CVE-2026-72211

A flaw was found in the Linux kernel's NTFS file system driver. When the driver attempts to reparent an index root, it can update metadata to reflect a larger size before the actual data structure is resized. If this resize operation fails, the file system can enter an inconsistent state. This...

CVE-2026-72167

A flaw was found in the mtd: rawnand: pl353 component of the Linux kernel. During the probe function, the devmioremap call incorrectly uses the parent device instead of the pl35x device for resource allocation. This oversight prevents the register area from being properly released when the module...

CVE-2026-72438

A flaw was found in the Linux kernel's multiple device MD driver, specifically in the RAID10 implementation. This vulnerability occurs due to reference leaks in the writespending and barrier mechanisms during discard failures. An attacker could potentially exploit this by triggering discard...

CVE-2026-72418

A flaw was found in the Linux kernel's netfilter connection tracking module. When a new network connection attempts to reuse a socket that is in a temporary waiting state after closing, the system incorrectly identifies it as an already confirmed connection. This misidentification causes the...

CVE-2026-72379

A flaw was found in the Linux kernel's filesystem fs component. The vfstmpfile function, used for creating temporary files with OTMPFILE, did not properly verify if a caller's user and group IDs fsuid and fsgid were mapped within an idmapped mount. This oversight could allow a local user to creat...

CVE-2026-72382

A flaw was found in ksmbd in the Linux kernel. A remote attacker, by sending a specially crafted security descriptor with an undersized Discretionary Access Control List DACL during an SMB2SETINFO operation, can trigger an integer underflow. This underflow leads to excessive memory allocations fo...

CVE-2026-72433

A flaw was found in the Linux kernel's netfilter component, specifically within the nftmetabridge module. This vulnerability, a stack leak, occurs due to improper handling of return values, which fails to test for nonzero results. An attacker could potentially exploit this issue to gain access to...

CVE-2026-72242

A flaw was found in the Linux kernel's SELinux module. When handling Stream Control Transmission Protocol SCTP connections, a specific function attempts to access a network socket that may not exist. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...

CVE-2026-72356

A flaw was found in the CIFS Common Internet File System component of the Linux kernel. A missing credit release on failure in the cifsissueread function can lead to a situation where retrying a sub-request overwrites existing credit values. This resource management issue could potentially lead t...

CVE-2026-72142

A flaw was found in the i2c-imx driver of the Linux kernel. When an I2C slave device performs an SMBus block-read operation with a byte count of zero, the atomic polling path in the driver fails to properly release the I2C bus. This can cause the bus to become stuck, requiring a power cycle of th...

CVE-2026-72402

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier logging mechanism. The printbpfinsn function, responsible for masking sensitive pointer values in verifier logs, did not correctly mask all pseudo-pointer types. This oversight could lead to kernel memory addresses being...

CVE-2026-72236

A flaw was found in the Linux kernel's s390 performance monitoring component s390/perfcpumcf. A userspace-controlled variable was used as an array index without proper speculation barriers. This could allow a local attacker to potentially exploit speculative execution, leading to information...

CVE-2026-72231

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. An incorrect check during the handling of TT Topology Table requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker...

CVE-2026-72387

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability, located in the groupprocesstileroom function, occurs when error pointers are improperly handled, leading to an invalid memory dereference. A local attacker could potentially exploit this flaw to cause a system...

CVE-2026-72281

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architectures. This vulnerability involves an issue with memory accounting for protected guest faults. During the teardown process, the system may incorrectly manage long-term memory pins, potentially leading to...

CVE-2026-72268

A flaw was found in the Linux kernel's tdfxfb driver. Specifically, the tdfxfbprobe function, when the CONFIGFB3DFXI2C option is enabled, does not properly free memory allocated for the modelist in certain error handling paths. This oversight can lead to a memory leak, which a local attacker coul...

CVE-2026-72169

A flaw was found in the Linux kernel's 'kho' component, responsible for memory management. When a user specifies fixed scratch sizes via the command line, these sizes are not consistently aligned to 'CMAMINALIGNMENTBYTES'. This can result in the kernel releasing a pageblock that is only partially...

RHSA-2026:55762 Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

Bulletin has no description...

CVE-2026-72376

A flaw was found in the Andrew File System AFS component of the Linux kernel. An issue exists where the net-cellsoutstanding counter is incremented before a necessary failure check during idralloccyclic operations. This can lead to the counter being incorrectly incremented even when an error...

CVE-2026-72267

A flaw was found in the fbdev: carminefb component of the Linux kernel. This vulnerability arises when memory allocated for the modelist in the fbvideomodetomodelist function is not properly deallocated during an error condition. This can lead to a memory leak, potentially impacting system...