PT-2026-72441

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack sip: validate skb dst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relie...

PT-2026-72529

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv-channel stats mlx5e channel stats alloc publishes a new entry to priv-channel stats and then increments priv-stats nch as a publication token, but neither store carries any memory barrier:...

PT-2026-72312

In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx op deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 "can: bcm: use call rcu instead of costly synchronize rcu" replaced synchronize rcu in bcm delete rx op with call rcu and introduced the RX N...

PT-2026-72231

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmi alloc recv msguser takes the temporary user reference owned by the receive message, and ipmi free recv msg drops it again. If event delivery fails after allocating receive...

PT-2026-72783

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nf ct timeout which is used by ct extension to set the custom ct timeout policy, this tells us that the ct timeout is being us...

PT-2026-72805

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix u-a-f in luo file unpreserve files and luo file finish In luo file unpreserve files and luo file finish, reorder module put and xa erase to ensure the file handler module remains pinned while its operations are...

PT-2026-72158

Name of the Vulnerable Software and Affected Versions Beaver Builder Page Builder versions prior to 2.10.2.3 Description The Beaver Builder Page Builder plugin for WordPress contains a stored cross-site scripting issue. This occurs due to insufficient input sanitization and output escaping within...

Linux Distros Unpatched Vulnerability : CVE-2026-74401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dlm: fix add msg handle in sendqueue ordered In a benchmark scenario triggering a lot of requests that triggers a lot of DLM messages on the network it can be...

Linux Distros Unpatched Vulnerability : CVE-2026-72205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: free volume-wide resources on fillsuper failure ntfsfillsuper's erroutnow path frees only the volume struct via kfreevol, leaving several vol-owned...

Linux Distros Unpatched Vulnerability : CVE-2026-72123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 can: bcm: use callrcu instead of costly synchronizercu replaced...

SUSE SLED15 / SLES15 Security Update : dracut (SUSE-SU-2026:3613-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3613-1 advisory. This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-74442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver...

Linux Distros Unpatched Vulnerability : CVE-2026-72336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before...

PT-2026-72955

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV TIMER IFLG DEAD once the close completes snd timer close locked marks an instance with SNDRV TIMER IFLG DEAD and returns early when the flag is already set, but the flag is never cleared again. A complete...

PT-2026-72579

In the Linux kernel, the following vulnerability has been resolved: net: phy: sfp: free mii bus in sfp i2c mdiobus destroy sfp i2c mdiobus create allocates the I2C MDIO bus with mdio i2c alloc, a plain non-devm allocation, and registers it. sfp i2c mdiobus destroy only unregisters the bus and...

PT-2026-72894

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroy workqueueNULL on vkms init failure Two paths through vmw vkms init can leave vmw-crc workq NULL while still leaving the rest of the driver in a state that calls vmw vkms cleanup at module unload: 1. vmw...

PT-2026-72355

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe, the devm ioremap is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x...

PT-2026-72760

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: validate skb length in testmode query In mt7925 tm query, the response skb from mt76 mcu send and get msg is used in a memcpy without validating its length: memcpyevt resp, skb-data + 8, MT7925 EVT RSP LEN;...

PT-2026-72837

In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send queue ordered In a benchmark scenario triggering a lot of requests that triggers a lot of DLM messages on the network it can be that the mh-seq is not ordered according the oldest seq number. This...

PT-2026-72169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the SET SPARSE, SET ZERO DATA, and SET COMPRESSION operations use current worker credentials instead of the credentials captured when the SMB handle was opened. This...