CVE-2026-72251

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT helpe...

CVE-2026-72245

CVE-2026-72245 relates to the Linux kernel GPU host1x driver, where a reference leak could occur in host1x_device_parse_dt() after device_initialize(). The embedded struct device was freed directly via kfree(device) in the error path, bypassing normal device lifetime handling and leaking a refere...

EUVD-2026-59139

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platformdeviceregister fails in sm501registerdevice, the embedded struct device in pdev has already been initialized by deviceinitialize, but the failure path only...

CVE-2026-72230 batman-adv: frag: free unfragmentable packet

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

EUVD-2026-59129

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

CVE-2026-72230

CVE-2026-72230 concerns batman-adv in the Linux kernel where batadv_frag_send_packet() may mis-handle errors from a pre-check for empty payload or zero fragment size, implying the skb isn’t consumed as assumed. The fix ensures the failed pre-check uses the same error handling code as the rest of ...

CVE-2026-72229 batman-adv: clean untagged VLAN on netdev registration failure

In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it via the NETDEVREGISTER notifier. But in this process, another receiv...

CVE-2026-72229

Summary: CVE-2026-72229 relates to the Linux kernel’s batman-adv handling of mesh interfaces. When registering a mesh interface, an untagged struct batadv_meshif_vlan is created on top of the netdev via NETDEV_REGISTER. If another notifier vetoes the registration, netdev registration is aborted a...

EUVD-2026-59128

In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it via the NETDEVREGISTER notifier. But in this process, another receiv...

CVE-2026-72229 batman-adv: clean untagged VLAN on netdev registration failure

In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it via the NETDEVREGISTER notifier. But in this process, another receiv...

CVE-2026-72228 batman-adv: frag: fix primary_if leak on failed linearization

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primaryif leak on failed linearization If the skb has a fraglist, it must be linearized before it can be split using skbsplit. But when this step failed, it must not only free the skb but also take care of t...

EUVD-2026-59127

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primaryif leak on failed linearization If the skb has a fraglist, it must be linearized before it can be split using skbsplit. But when this step failed, it must not only free the skb but also take care of t...

CVE-2026-72228

The CVE-2026-72228 entry documents a Linux kernel issue in batman-adv where frag_list handling during linearization of skbs is faulty. Specifically, if an skb contains a frag_list and skb_split() is used, the skb must be linearized first; on failure, the code must free the skb and also correctly ...

CVE-2026-72228 batman-adv: frag: fix primary_if leak on failed linearization

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primaryif leak on failed linearization If the skb has a fraglist, it must be linearized before it can be split using skbsplit. But when this step failed, it must not only free the skb but also take care of t...

EUVD-2026-59122

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

EUVD-2026-59123

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72224

The CVE concerns the Linux kernel nvdimm/btt code path: arenas allocated by discover_arenas() or create_arenas() are not freed on certain error paths in btt_init(), causing a memory leak during BTT initialization failure. The practical impact is leaked memory during failed BTT initialization. The...

CVE-2026-72223

The CVE-2026-72223 entry concerns the Linux kernel, specifically the nvdimm/btt component. The vulnerability stems from memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() not being freed on certain discover_arenas() error paths, causing a memory leak when arena disco...

CVE-2026-72224 nvdimm/btt: Free arenas on btt_init() error paths

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72223 nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...