CVE-2026-64048: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ismdev slot On the SMC-D client, slot 0 of ini-ismdev/ini-ismchid is reserved for an SMC-Dv1 device. smcfindismv2deviceclnt populates V2 entries starting at index 1, so when no ...

CVE-2026-64027: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

CVE-2026-64004: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucvsocksetsockopt and wrap the whole switch in locksock/releasesock. The pre-existing SOMSGLIMIT-only lock becomes redundant and is removed. Any AFIUCV HIPER user can potentially crash...

CVE-2026-63978: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to listspliceinit in handshakenetexit are reversed. The call moves the local empty "requests" list onto hn-hnrequests, leaving the local list empty, so the...

CVE-2026-63918: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...

CVE-2026-64124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length netdevmembinddmabuf trusts dmabuf-size and sgdmalen to be PAGESIZE multiples without checking: - txvec is sized dmabuf-size / PAGESIZE, and netdevmemgetniov...

CVE-2026-63870: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpanxmit The aoe driver or similar generates a non-IPv6 packet e.g., ETHPAOE and queues it for transmission via devqueuexmit on a 6LoWPAN interface configured by the user or test...

CVE-2026-63979: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to acceptdoit handshakereqnext removes the request from the per-net pending list and drops hnlock before handshakenlacceptdoit reads req-hrsk-sksocket and dereferences sock-file...

PT-2026-61329

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch sfb component of the network scheduler. When sfb has children, such as a qfq qdisc, a kernel panic can occur due to a null-pointer dereference. This happens wh...

PT-2026-61236

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm input component where the network namespace netns is not properly held during deferred transport reinjection. The process stores a struct net pointer in skb-c...

PT-2026-61322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/smc module where INIT HLIST HEAD&smc v hashinfo.ht is called after smc nl init, proto register, and sock register. This sequence can cause the smc v hashinfo.h...

Linux Distros Unpatched Vulnerability : CVE-2026-63829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipgre: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the tunnel link netns t-net...

PT-2026-61474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs invalidate folio function where partial invalidation of a streaming-write folio is handled incorrectly. When a partial invalidation region overlaps the front...

PT-2026-61371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the network shaper component where the net shaper nl group doit function fails to deduplicate NET SHAPER A LEAVES entries. If a user provides the same leaf handle multip...

PT-2026-61344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the network shaper component due to the non-atomic storage of flags within the XArray. A reader may observe a VALID mark for a slot but be interrupted before...

PT-2026-61296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/handshake component. The handshake req next function removes a request from the pending list and releases the hn lock before handshake nl accept doit...

CVE-2026-64055: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets in an SKB from a ring buffer. If the ring buffer gets completely emptied during a poll cycle, we exit gmacrx, but the packet is not y...

CVE-2026-63982: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix ethx:ingress - ethy:egress - ethx:ingress mirred loop When mirred redirects to ingress from either ingress or egress the loop state from schedmirreddev array dev is lost because of 1 the packet deferral into the...

CVE-2026-63981: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact checks schedmirrednest against MIRREDNESTLIMIT 4 to prevent deep recursion. However, when the action uses blockcast tcfmblockid != 0, the...

CVE-2026-63980: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spinlockbh for hnlock nvmettcpstatechange, a socket callback that runs in BH context, can reach handshakereqcancel via nvmettcpschedulereleasequeue and tlshandshakecancel. handshakereqcancel acquires hn-hnlock...