CVE-2026-72006 net/mlx5: free mlx5_st_idx_data on final dealloc

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5stidxdata per cycle; kmemleak flags it as unreferenced...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-72354

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9 client rpc on fatal signal When p9 client rpc is called with type P9 TFLUSH and the transport has no peer e.g. fd transport backed by pipes with no 9p server, a fatal signal causes an infinite loop...

PT-2026-72848

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pci get drvdata type in AER handlers rtw88 stores an ieee80211 hw pointer via pci set drvdata at probe time, but io error detected and io resume retrieve it as a net device pointer. This causes netif device...

PT-2026-72722

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netdevs PFCP uses dev get tstats64 as its ndo get stats64 callback, but pfcp link setup does not request NETDEV PCPU STAT TSTATS. The net core therefore leaves dev-tstats NULL for PFCP...

PT-2026-72700

In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked dev hold/dev put calls in the watchdog code to use the tracked dev hold track/dev put track which were later renamed/interfaced to netdev hold and...

PT-2026-72818

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls bpf: prevent unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in cls bpf offload cmd. Reproducer on netdevsim: add a skip sw cls bpf filter, set the bpf tc accept debugfs knob to 0, then...

Linux Distros Unpatched Vulnerability : CVE-2026-72166

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g. fd transport backed b...

Linux Distros Unpatched Vulnerability : CVE-2026-72035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schtaprio: Replace direct dequeue call with peek and qdiscdequeuepeeked When taprio's software path peeks a non-work-conserving child qdisc, the chil...

RockyLinux 8 : .NET 10.0 (RLSA-2026:54542)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

RockyLinux 9 : .NET 8.0 (RLSA-2026:54574)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Linux Distros Unpatched Vulnerability : CVE-2026-74544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the user-provided tcu32sel.offshift unsigned char, 0-255 into the kernel...

PT-2026-72932

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to July 2026 Red Hat Enterprise Linux 10.2 Description A use-after-free issue exists in the net bridge component of the Linux kernel. The problem occurs in the br multicast leave group function during the fast-leave...

Linux Distros Unpatched Vulnerability : CVE-2026-74290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsflow: Dont expose folded kernel pointers The flow classifier falls back to addrfold for fields that are missing from packet headers. In map mode,...

PT-2026-72618

In the Linux kernel, the following vulnerability has been resolved: net/sched: act ct: fix nf connlabels leak on two error paths tcf ct fill params calls nf connlabels get setting put labels when TCA CT LABELS is present, but two later error sites use a bare return instead of "goto err", skipping...

PT-2026-72746

In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubuf info per outstanding zerocopy TX descriptor and hands it to the backend socket. The networking stack may then clone a zerocopy skb before all skb...

PT-2026-72592

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanup bearer due to premature dst cache destroy TIPC UDP media bearer teardown calls dst cache destroy on its replicast caches before calling synchronize net to wait for concurrent RCU readers transmitters to...

RockyLinux 8 : .NET 9.0 (RLSA-2026:54550)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54550 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Linux Distros Unpatched Vulnerability : CVE-2026-72057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: preserve tcskbcb across defragmentation tcfcthandlefragments calls nfcthandlefragments without saving and restoring skb-cb. The defrag helper...