PT-2026-72430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the selinux sctp bind connect function where it dereferences sk-sk socket to provide a socket structure to selinux socket bind and selinux socket connect helper. When...

Linux Distros Unpatched Vulnerability : CVE-2026-72253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems...

PT-2026-72866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of ACKALL packets within the rxrpc module. The function rxrpc input ackall accepts ACKALL packets without verifying if the call is in a state that can...

PT-2026-72205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On arm64 architecture, a NULL kobject warning occurs in cpuhp smt enable when booting with maxcpus exceeding the number of present CPUs. This happens because some CPUs are marked as...

PT-2026-72351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference in the ocfs2 assure trans credits function can cause a kernel panic. This occurs during Direct I/O DIO completion when a direct write over unwritten extents...

PT-2026-72504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the metadata open function. When kzalloc obj fails, metadata open returns NULL; however, the caller function era ctr only checks for errors using IS...

CVE-2026-74304: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: fix NULL pointer dereference in qcasetup for non-serdev device hu-serdev is NULL for hciuart attached via non-serdev paths, but qcasetup unconditionally calls serdevdevicegetdrvdatahu-serdev and dereferences th...

CVE-2026-74366: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL deref in changestalinks for unready link ieee80211setactivelinks calls ieee80211linkusechannel for each newly-added link and WARNONONCEs if it fails. The call uses assignonfailure=true, which allows mac8021...

PT-2026-72695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the CIFS module during the unmounting process. When CIFS files are placed into the fileinfo put wq queue during an umount operation, the...

PT-2026-72913

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free or NULL pointer dereference occurs in the i2c imx driver. In the i2c imx unreg slave function, the slave pointer is set to NULL after interrupts are disabled. If a pendi...

PT-2026-72763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the is vm area hugepages function. This occurs because the find vm area function can return NULL when the provided address is not a valid vmalloc are...

PT-2026-72865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc component where the rxrpc receiving reply function fails to properly handle the reception of a reply DATA packet before any request DATA packets have been se...

PT-2026-72778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when creating a cgroup directory under /sys/fs/cgroup on SELinux-enabled distributions. The issue arises because the LSM kernfs init...

PT-2026-72924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ublk ctrl add dev function where the kernel fails to reset specific kernel-owned fields after copying ublsrv ctrl dev info from userspace into ub-dev info...

PT-2026-72565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS component where the afs apply status function unconditionally calls mapping set release always for symlinks and mountpoints. While regular AFS files use afs fi...

PT-2026-72561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing NULL pointer check exists in the afs break some callbacks function. The issue occurs when the afs lookup volume rcu function returns NULL, which can happen if the specified...

PT-2026-72871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where rxrpc recvmsg data calls rxrpc verify data when rxrpc call.rx dec buffer is unallocated, assuming it will be allocated upon a successful return. However, rxrpc veri...

PT-2026-72710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CXL driver where NULL endpoint decoder pointer holes can be left in the target array of an active auto-assembly region. This occurs when cxl cancel auto attach...

PT-2026-72283

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

PT-2026-72861

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS Andrew File System component where the cache manager callback path fails to properly handle requests when a server record is not attached to an incoming call v...