PT-2026-79604

In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using init mm Previous commits have established the invariant that kernel page table freeing is performed while an mmap read lock on init mm is held, which fixes races betwee...

PT-2026-79677

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges wher...

Linux Distros Unpatched Vulnerability : CVE-2026-74672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series mm: fix UAF caused by race between ptdump and vmap pgtable freeing, v6. Kernel pag...

Linux Distros Unpatched Vulnerability : CVE-2026-74632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: fix hugezeropfn race Patch series mm/hugememory: fix hugezeropfn race, v2. There is a subtle race in the reference-counted hugezerofolio...

Linux Distros Unpatched Vulnerability : CVE-2026-74674

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: fix incorrect flush address in direct page table reclaim When zappterange reclaims a page table, it does: ptefreetlbtlb, pmdpgtablepmdval, addr %NASLMINLEV...

Linux Distros Unpatched Vulnerability : CVE-2026-74591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a- conflict loop, xassetorder is applied repeatedly: each application...

kernel: mm/huge_memory: update file PMD counter before folio_put()

A flaw was found in the Linux kernel's memory management, specifically within the huge page mechanism. When a huge page is split, the system updates a counter after releasing a reference to the memory. This timing issue can lead to the system attempting to read from memory that has already been...

kernel security, bug fix, and enhancement update

4.18.0-553.155.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CVE-2026-72027

A flaw was found in the Linux kernel's memory management subsystem, specifically within the mm/compaction component. When the freepagesprepare function fails, the compactionfree function does not properly handle this error. This oversight can lead to pages that are either hardware poisoned...

CVE-2026-74576

Summary of CVE-2026-74576 (Linux kernel) : The vulnerability stems from the slab allocator allowing unbounded recursion in the free path due to cycles formed when obj_exts arrays are allocated across KMALLOC_NORMAL caches. Specifically, slabs can form a cycle by allocating each other’s obj_exts a...

CVE-2026-74576 mm/slab: prevent unbounded recursion in free path with new kmalloc type

In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b "mm/slab: avoid allocating slabobjext array from its own slab" avoided recursive allocation of objexts from kmalloc caches of the same...

CVE-2026-74481

In the Linux kernel, the following vulnerability has been resolved: mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset their underlying virtio devices and delete their virtqueues via...

CVE-2026-72173

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72172

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: fix uninitialized struct pages for ZONEDEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, sectionactivate reuses the unoptimized boot memmap. However, compoundnrpages still assumes th...

CVE-2026-72027

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

UBUNTU-CVE-2026-72173

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72027

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

CVE-2026-72412

The CVE-2026-72412 entry concerns the Linux kernel s390/mm subsystem and the _PAGE_UNUSED (PAGE_UNUSED) PTE bit. Root cause: KVM could set the bit for unmapped guest pages; later paths could leave it set, so present pages might be treated as unused, risking guest corruption. The fix implemented i...

CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...