CVE-2026-72013: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where image-segmenti.buf might be NULL and copied unchecked. The NULL buf comes from...

CVE-2026-72502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP as mssclamp, allowing the MSS to reach 65535. However, 0xFFFF is also...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It arises when an error code is overwritten by the return value of the exit callback during the cacheops-populate callback in the initialization phase of regcache, potentially leading to a null pointer dereference...

PT-2026-72866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of ACKALL packets within the rxrpc module. The function rxrpc input ackall accepts ACKALL packets without verifying if the call is in a state that can...

PT-2026-72865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc component where the rxrpc receiving reply function fails to properly handle the reception of a reply DATA packet before any request DATA packets have been se...

PT-2026-72854

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Trace dma fence signaled, trace dma fence wait end and trace dma fence destroy can all currently dereference a null fence-ops pointer after it has been reset on fence...

PT-2026-72758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in the mt7996 mac write txwi 80211 function. This happens when mac80211 passes info-control.vif as NULL for injected frames, such as those sent via...

PT-2026-72802

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the ath12k wifi driver. When ieee80211 set active links calls ieee80211 link use channel and a channel validation fails, the function drv assign vif...

PT-2026-72778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when creating a cgroup directory under /sys/fs/cgroup on SELinux-enabled distributions. The issue arises because the LSM kernfs init...

PT-2026-72678

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw aes decrypt The null-pointer-guard was incorrect, returning FAIL on valid pointer. Invert the guard, so it returns FAIL on invalid pointer...

PT-2026-72612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the shared IRQ handler during the probe process of the msc313 RTC driver. The function msc313 rtc probe calls devm request irq using IRQF SHARED and...

PT-2026-72561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing NULL pointer check exists in the afs break some callbacks function. The issue occurs when the afs lookup volume rcu function returns NULL, which can happen if the specified...

PT-2026-72646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the AppArmor module within the unpack pdb function. This happens because the pdb-dfa variable can be NULL if the unpack dfa function fails, leading t...

PT-2026-72655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rpcrdma xprt connect function ignores the return value of frwr wp create. The frwr wp create function is responsible for creating a singleto...

PT-2026-72656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when a local administrator performs an NFS/RDMA mount simultaneously with the removal of an RDMA device. The function rpcrdma create id registers ep-re rn with th...

PT-2026-72445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the graph callback function. This occurs when q6apm free fragments frees rx data.buf or tx data.buf and sets them to NULL under graph-lock. A race...

PT-2026-72557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the Minix file system implementation when calculating bitmap block counts. The function minix check superblock utilizes minix blocks needed, which performs...

PT-2026-72530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A registration race condition exists in the net/mlx5e module. The function mlx5e hv vhca stats create uses mlx5 hv vhca agent create to register a stats agent. This helper publishes the...

PT-2026-72515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the v3d get cpu indirect csd params function fails to verify the result of a buffer object lookup performed via drm gem object lookup. When...

PT-2026-72531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5e driver where a zero-sized buffer is allocated during the creation of HV VHCA stats. When mlx5e hv vhca stats create is called before mlx5e open, the...