CVE-2026-72244

CVE-2026-72244 relates to the Linux kernel GPU buddy allocator. The vulnerability arises in the try_harder contiguous fallback where a candidate range’s start offset could be misaligned with the caller’s min_block_size. The fix realigns misaligned candidates by freeing the misaligned run and real...

CVE-2026-72232 batman-adv: ensure minimal ethernet header on TX

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 "net: bridge: xmit: make sure we have at least eth header len bytes", it is possible by for a local user with eBPF TC hook access to attach a t...

CVE-2026-72226 batman-adv: tt: prevent TVLV OOB check overflow

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the size of the struct batadvtvlvttvlandata 8 bytes. The size can therefore...

CVE-2026-72226

CVE-2026-72226 affects the Linux kernel’s batman-adv TT (broadcast) implementation. A TT unicast TVLV stored the VLAN count as a 16-bit value (u16) and multiplied it by 8 bytes for batadv_tvlv_tt_vlan_data, which could overflow tt_vlan_len and invalidate safety checks against the TVLV buffer. The...

EUVD-2026-59125

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the size of the struct batadvtvlvttvlandata 8 bytes. The size can therefore...

CVE-2026-72222

In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svcxprt across the asynchronous TLS handshake callback svctcphandshake stores the raw svcxprt pointer in tlshandshakeargs.tadata and submits the request through tlsserverhellox509. The handshake core takes only...

CVE-2026-72217 SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdrbuftobvec stores before writing xdrbuftobvec writes a biovec into the caller's array before testing whether that slot is in range, and the head branch performs the store with no check at all. When the...

CVE-2026-72217

CVE-2026-72217 – The Linux kernel SUNRPC xdr_buf_to_bvec() path wrote a bio_vec into the caller’s array before validating the target slot, allowing an out-of-bounds write when budget is exhausted. The rq_bvec array for nfsd_vfs_write() is allocated to rq_maxpages with no slack, so an overflow cou...

CVE-2026-72211

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-72208

Summary: CVE-2026-72208 affects the Linux kernel’s NTFS-related code paths. The vulnerability stems from missing bounds checks in ntfs_ea_lookup and ntfs_listxattr when verifying space before reading the next_entry_offset in EA entries. Affected components: Linux kernel NTFS attribute handling (E...

CVE-2026-72209

The CVE-2026-72209 entry describes a Linux kernel NTFS attribute value validation flaw. ntfs_attr_find() and ntfs_external_attr_find() inadequately validate variable-length resident attribute fields, allowing embedded length fields to point past the resident value, enabling a slab-out-of-bounds r...

CVE-2026-72208 ntfs: add bounds check before accessing EA entries

In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfsealookup and ntfslistxattr, this verifies that there is enough space in the EA entry before accessing the nextentryoffset field of the EA entry...

CVE-2026-72206

CVE-2026-72206 : In the Linux kernel, the NTFS index block validation was tightened. The change updates ntfs_index_block_inconsisent() to perform stricter validation of INDEX_HEADER geometry in INDX blocks and makes ntfs_lookup_inode_by_name() call this validation when processing INDX blocks. Thi...

EUVD-2026-58962

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEXROOT header validation Add a dedicated helper to perform stricter validation of $INDEXROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

EUVD-2026-58958

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt runlis...

CVE-2026-72200

The CVE-2026-72200 entry concerns the Linux kernel NTFS mapping-pairs parser, where the accumulation of relative LCN deltas can overflow a signed integer. A corrupted attribute can drive the accumulated LCN beyond the representable range, and a specific shape (LCN large positive, then +1 delta) m...

CVE-2026-72201

In CVE-2026-72201, the Linux kernel NTFS path fixes a vulnerability by validating index entries immediately after reading an index root or index block from disk, preventing missed checks in lookup/readdir. The root cause involved inadequate validation during index reads, and the fix reduces risk ...

CVE-2026-72201

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...

CVE-2026-72200 ntfs: detect mapping-pairs LCN accumulator overflow

In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt runlis...

CVE-2026-72199

Summary of CVE-2026-72199 (Linux kernel ntfs $INDEX_ROOT validation) : The vulnerability concerns the resident index root values for NTFS attributes. The fixed issue involved insufficient validation of resident $INDEX_ROOT header invariants after lookup, which could affect fields such as entries_...