CVE-2026-72069 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the following UAF scenario: T1 T2 spinlock&p-lock; rcureadlock; invalidatep;...

CVE-2026-72069

Technical details for CVE-2026-72069 are not publicly provided in the supplied documents; monitor for updates.

Linux Distros Unpatched Vulnerability : CVE-2026-74334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/nldev: Fix locking when accessing mr-pd Sashiko points out that, due to reregmr, the PD is actually variable and all the touches in nldev are racy. Use...

PT-2026-72470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lifetime issue exists in the KVM component where the kvm io bus get dev function returns a device matched only by address. If the matched device is not of the expected type, the object...

CVE-2026-72155: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...

CVE-2026-74334: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr-pd Sashiko points out that, due to reregmr, the PD is actually variable and all the touches in nldev are racy. Use mr-device instead of mr-pd-device. Getting the PD restrack ID is more...

Linux Distros Unpatched Vulnerability : CVE-2026-72121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous...

PT-2026-72258

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rt spin unlock function releases RCU Read-Copy-Update protection before the lock is actually unlocked. This behavior differs from regular...

PT-2026-73027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the thunderbolt component. The function tb xdp handle request runs on the system workqueue and queues xd-state work via queue delayed work during specifi...

CVE-2026-72372: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

PT-2026-72787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the ocfs2 module. The locking state debugfs iterator snapshots the ocfs2 lock res structure by value under the ocfs2 dlm tracking lock and...

Linux Distros Unpatched Vulnerability : CVE-2026-72155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the...

Linux Distros Unpatched Vulnerability : CVE-2026-74438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is...

PT-2026-72501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/fb-helper component where fbdev output is synchronized to the vblank of CRTC 0 regardless of whether it is active. This leads to warnings and timeouts when the...

PT-2026-72343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtd: spi-nor: swp component where attempting to unlock only the specific blocks that are currently locked fails if those are the first few blocks of the device. Th...

PT-2026-72770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/nldev component where locking is insufficient when accessing mr-pd. Due to rereg mr, the Protection Domain PD is variable, causing race conditions during...

PT-2026-72560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS component where there is a lack of locking around modifications of the net-cells dyn ino variable. To resolve this, the net-cells lock must be taken exclusivel...

SUSE CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...

Linux mm/migrate.c DoS

The vulnerability of the mm/migrate.c component in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Thread Locking DoS

The vulnerability of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...