Linux Distros Unpatched Vulnerability : CVE-2026-74630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then unconditionally increments its refcount. Device teardown can...

Linux Distros Unpatched Vulnerability : CVE-2026-74660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the...

Linux Distros Unpatched Vulnerability : CVE-2026-74605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the...

Linux Distros Unpatched Vulnerability : CVE-2026-74589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket reference for psock-skredir. tcpbpfsendverdict copies that pointer whi...

Linux Distros Unpatched Vulnerability : CVE-2026-74721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to...

Linux Distros Unpatched Vulnerability : CVE-2026-74704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if...

Linux Distros Unpatched Vulnerability : CVE-2026-74655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted ...

Linux Distros Unpatched Vulnerability : CVE-2026-74712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0...

Linux Distros Unpatched Vulnerability : CVE-2026-74602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a...

PT-2026-79621

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skb shared info tailroom xdpf clone clones broadcast copies into a single page and sets frame sz to PAGE SIZE. xdp build skb from frame later treats that page like a normal XDP frame and expects th...

PT-2026-79733

In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b addr in xfs buf free When xfs buf alloc backing mem fails, xfs buf free is called with bp-b addr still NULL. The code falls through to the folio put path which calls virt to folioNULL, dereferencing an invalid...

PT-2026-79724

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM LINK and ADD LINK CONT in smc llc event handler The SMC LLC CONFIRM LINK / SMC LLC ADD LINK CONT branch in smc llc event handler stores an incoming qentry into the local LLC flow without...

PT-2026-79629

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-packet logs while ct-lock is still held. When invalid logging is routed to nfnetlink log and conntrack export is enabled,...

PT-2026-79660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qcom-geni UART driver where flushing the transmit buffer during an ongoing TX DMA Direct Memory Access causes the UART to infinitely repeat corrupted TX DMA frames...

PT-2026-79593

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctp outq flush rtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsn gap acked list move...

Linux Distros Unpatched Vulnerability : CVE-2026-74724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ih...

Linux Distros Unpatched Vulnerability : CVE-2026-74594

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking...

PT-2026-79634

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb clientid arr A dibs device interrupt handler can be active after dibs dev del and may still access dmb clientid arr. UAF In case of a failure in dibs dev add being called by dibs lo dev probe dmb...

PT-2026-79601

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr prepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case...

Linux Distros Unpatched Vulnerability : CVE-2026-74670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. ...