EUVD-2026-58900

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...

CVE-2026-72142

CVE-2026-72142 affects the Linux kernel i2c/imx driver, fixing a locked bus on SMBus block-read of 0 (atomic). The vulnerability occurs when SMBus 3.1 6.5.7 allows a Block Read byte count of 0 but the atomic path rejects it (-EPROTO) and can start a new receive cycle, leaving SDA held and the bus...

CVE-2026-72141 i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-72141

CVE-2026-72141 covers a Linux kernel issue in the i2c/imx SMBus path where a Block Read with a count of 0 could cause the bus to stay locked. The vulnerability arises because the interrupt-driven state machine incorrectly handles -EPROTO for a zero-byte block read, failing to issue a NACK+STOP an...

EUVD-2026-58899

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-72138 xen/gntdev: fix error handling in ioctl

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

CVE-2026-72037 net: lan743x: Initialize eth_syslock spinlock before use

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

PT-2026-72915

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An AB/BA deadlock exists between the Common Clock Framework CCF and the I2C adapter lock. This occurs when an I2C-controlled clock generator client is registered or modified under the CC...

PT-2026-72650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the AppArmor module during unix socket mediation when peer path is used. The issue occurs because holding a reference to the peer sk does not guarantee access ...

PT-2026-72340

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tpm tis spi component where the wait event interruptible timeout function evaluates its condition after setting the current task state to TASK INTERRUPTIBLE. When...

PT-2026-72314

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists in the ISO Transport IsoTP protocol implementation. The isotp release function attempts to look up a bound network device using dev get by index an...

Linux Distros Unpatched Vulnerability : CVE-2026-72142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO...

Linux Distros Unpatched Vulnerability : CVE-2026-72388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dmafence objects can be shared with other subsystems, they may be accessed from...

Linux Distros Unpatched Vulnerability : CVE-2026-72472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs: use nfsi-rwsem to protect traversal of the file lock list Lingfeng identified a bug and suggested two solutions, but both appear to have issues. Generally,...

Linux Distros Unpatched Vulnerability : CVE-2026-74563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a scoped IPv6 interface with devgetbyindexrcu, drops the RCU...

PT-2026-72520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the Linux kernel when the function amdxdna hwctx sync debug bo invokes the hardware hwctx sync debug bo callback while holding the xdna-dev lock lock. This callback...

PT-2026-72599

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc err work Upon an MDIO CRC error mxl862xx crc err work fn walks the DSA ports and closes the CPU port conduits: dsa switch for each cpu portdp, priv-ds dev closedp-conduit...

PT-2026-72576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the fence lock is not acquired using an IRQ-safe variant. Because dma fence objects can be shared with other subsystems, they may be...

PT-2026-72990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where the iso connect ind function fails to acquire lock sock during the "ev3" phase. This leads to an unsafe access of iso pisk-conn,...

PT-2026-72995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the UDP tunnel NIC offload code. When device registration fails in register netdevice, the udp tunnel nic unregister function may return early if the utn-work...