9615 matches found
CVE-2026-72083
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE corescsi3emulateproregisterandmove maps the PERSISTENT RESERVE OUT parameter list with transportkmapdatasg and parses the destination TransportID with...
CVE-2026-72060 net: ethernet: ti: icssg: guard PA stat lookups
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: icssg: guard PA stat lookups icssgndogetstats64 unconditionally calls emacgetstatbyname with FW PA stat names regardless of whether the PA stats block is present on the hardware. emacgetstatbyname already guard...
CVE-2026-72024
CVE-2026-72024 concerns the Linux kernel’s mac802154 handling of interfaces under RCU. The issue arises when bulk teardown paths remove entries with list_del(), allowing an asynchronous transmit completion to follow a poisoned list node in ieee802154_wake_queue(). The root cause is the use of lis...
CVE-2026-72017
Summary: CVE-2026-72017 affects the Linux kernel MACB driver (net: macb: drop in-flight Tx SKBs on close). The issue is a leak of outgoing SKBs held in queue->tx_skb, which are freed without proper checks. The leak is triggered via macb_free_consistent() in certain paths, with open/alloc_consi...
EUVD-2026-59098
In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may reallocate skb-head...
CVE-2026-68476 ipvs: reload ip header after head reallocation
In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may reallocate skb-head...
CVE-2026-68455
In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...
Linux Distros Unpatched Vulnerability : CVE-2026-68471
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE type...
Linux Distros Unpatched Vulnerability : CVE-2026-74560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: fix buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq...
Linux Distros Unpatched Vulnerability : CVE-2026-72323
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown inetdevdestroy and incoming IGMP query processing igmprcv,...
PT-2026-72718
In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt unacked underflow on CONN ACK tipc sk conn proto rcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter snt unacked without checking that it does not exceed the number of...
PT-2026-72206
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The MACB driver leaks outgoing SKBs Socket Buffers, which are data structures used to manage network packets that have not been marked as completed. These buffers reside in queue-tx skb...
Linux Distros Unpatched Vulnerability : CVE-2026-72434
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, canceldelayedworksync was called while gc calls queuedelayedwork...
Linux Distros Unpatched Vulnerability : CVE-2026-74406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set sk-skuserdata to NULL while vxlangropreparereceive is running. Let...
Linux Distros Unpatched Vulnerability : CVE-2026-74531
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: hold conn reference in abortconnsync There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid...
Linux Distros Unpatched Vulnerability : CVE-2026-74548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - forcedeth: fix UAF of txrxstats in nvremove nvremove frees the per-CPU txrxstats before unregisternetdev. Until unregister completes, ndogetstats64, the NAPI/xm...
Linux Distros Unpatched Vulnerability : CVE-2026-72493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: serialize netifrunning check in enqueuetobacklog Syzbot reported a KASAN slab-use-after-free in fibruleslookup. The root cause is a race condition where...
PT-2026-72977
In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init dma desc rings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same functi...
