EUVD-2026-59104

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

CVE-2026-68461 device property: initialize the remaining fields of fwnode_handle in fwnode_init()

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

MINI-RGF3-XM45-XWVC

Bulletin has no description...

PT-2026-72283

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

PT-2026-72607

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf nat: avoid invalid nat net pointer use on failed nf nat init We ran into below KASAN splat, which is mostly uninteresting, beside for having nf nat register fn in the call chain as a cause for the offending access:...

PT-2026-72504

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata open metadata open returns NULL when kzalloc obj fails, but the caller era ctr only checks IS ERRmd. Since IS ERRNULL returns false, the NULL pointer is treated as a valid result a...

PT-2026-72722

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netdevs PFCP uses dev get tstats64 as its ndo get stats64 callback, but pfcp link setup does not request NETDEV PCPU STAT TSTATS. The net core therefore leaves dev-tstats NULL for PFCP...

PT-2026-72836

In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf set|remove dentry xattr for negative dentries bpf set dentry xattr and bpf remove dentry xattr BPF kfuncs attempt to lock the inode of the supplied dentry without checking if it is NULL. If a negative dentry...

PT-2026-72771

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf task from vpid bpf task from vpid looks up a task in the pid namespace of the current task, via find task by vpid: find task by vpidvpid find task by pid nsvpid, task active pid nscurrent...

PT-2026-72335

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw edma pcie probe treats the PCI device ID driver data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can...

PT-2026-72823

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with event input event process midi borrows msynth-output rfile.output and then passes the substream to dump midi and snd rawmidi kernel write without synchronizing with the output...

PT-2026-72699

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skb clone in control TX t7xx port ctrl tx clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned-len, so an skb clone failure results in a NULL...

PT-2026-72763

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is vm area hugepages find vm area can return NULL if the given address is not a valid vmalloc area. Check the return value before dereferencing it to avoid a kernel crash...

Linux Distros Unpatched Vulnerability : CVE-2026-74477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uprobes: Fix NULL pointer dereference in hprobeexpire Forking a task that has a pending uretprobe can oops the kernel with a NULL pointer dereference in the clo...

PT-2026-72351

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h transaction deref in ocfs2 assure trans credits BUG A direct write over unwritten extents can panic the kernel in ocfs2 assure trans credits when the journal aborts during DIO completion. The crash is a general...

PT-2026-72430

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk socket dereference in selinux sctp bind connect selinux sctp bind connect dereferences sk-sk socket to pass a struct socket to selinux socket bind and selinux socket connect helper. However, when the hook is...

PT-2026-72641

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cache ops-populate callback, and if cache operations include an exit callback, the error code from...

PT-2026-72550

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xe pt zap ptes entry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xe pt zap ptes entry called container ofchild before checking for NULL, then...

Linux Distros Unpatched Vulnerability : CVE-2026-72253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems...

Linux Distros Unpatched Vulnerability : CVE-2026-72147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and...