CVE-2026-72403

Summary: CVE-2026-72403 concerns the Linux kernel ALSA FCP USB handling. A malformed vendor-specific USB interface with no endpoint descriptors can cause a NULL pointer dereference in fcp_find_fc_interface() when it incorrectly reads endpoint 0 from the first vendor-specific interface without ver...

CVE-2026-72403 ALSA: FCP: Fix NULL pointer dereference in interface lookup

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcpfindfcinterface currently selects the first vendor-specific interface...

CVE-2026-72392 ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump

In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...

CVE-2026-72392

The CVE-2026-72392 entry describes a NULL pointer dereference in the Linux kernel during multi-batch inet6_dump_fib/walk logic for IPv6 fib6_dump_table and inet6_dump_fib. The root cause is that inet6_dump_fib() saves progress using a positional index in cb->args[1], which can be invalidated b...

EUVD-2026-59291

In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...

CVE-2026-72392 ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump

In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...

CVE-2026-72385 tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry()

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

EUVD-2026-59284

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

CVE-2026-72385 tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry()

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

CVE-2026-72385

CVE-2026-72385 concerns the Linux kernel tracing/fprobe component. The issue is a NULL pointer dereference in fprobe_fgraph_entry() caused by mis-synchronization between two walks that size and fill a shadow-stack reservation under rcu_read_lock(). If a fprobe on an already-live ip becomes visibl...

CVE-2026-72377 afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of ASRELEASEALWAYS for symlinks and mountpoints Regular AFS files correctly use afsfileaops which have releasefolio set as netfsreleasefolio, so ASRELEASEALWAYS is valid for them when fscache is enabled set vi...

CVE-2026-72377

Summary of CVE-2026-72377 : In the Linux kernel, a defect in AFS handling caused symlinks and mountpoints to incorrectly inherit AS_RELEASE_ALWAYS due to afs_apply_status(), even though they use afs_dir_aops which have no release_folio callback. This mismatch allowed memory management code to mis...

EUVD-2026-59276

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of ASRELEASEALWAYS for symlinks and mountpoints Regular AFS files correctly use afsfileaops which have releasefolio set as netfsreleasefolio, so ASRELEASEALWAYS is valid for them when fscache is enabled set vi...

CVE-2026-72377 afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of ASRELEASEALWAYS for symlinks and mountpoints Regular AFS files correctly use afsfileaops which have releasefolio set as netfsreleasefolio, so ASRELEASEALWAYS is valid for them when fscache is enabled set vi...

CVE-2026-72373

The CVE-2026-72373 entry concerns the Linux kernel. It fixes a NULL pointer dereference in afs_break_some_callbacks() by adding a check for NULL from afs_lookup_volume_rcu(), addressing cases where the specified AFS volume is unknown. The vulnerability description across sources aligns on this ro...

CVE-2026-72373 afs: Fix missing NULL pointer check in afs_break_some_callbacks()

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified volume is unknown...

EUVD-2026-59272

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified volume is unknown...

CVE-2026-72373 afs: Fix missing NULL pointer check in afs_break_some_callbacks()

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified volume is unknown...

CVE-2026-72366

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfscreatewritereq to handle async cache object creation netfscreatewritereq will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough...

EUVD-2026-59261

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...