CVE-2026-74736

CVE-2026-74736 is a Linux kernel vulnerability in the net/sched cls_bpf classifier. The function cls_bpf_prog_from_efd() retrieved a SCHED_CLS program via bpf_prog_get_type_dev() without verifying that a device-bound (offloaded) BPF program's bound netdev matched the target TC netdev. This allowe...

CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

kernel: netfilter: ipset: fix race between dump and ip_set_list resize

A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the ipsetlist resize operation and dump operations. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated. A successful exploitation of this flaw cou...

SUSE CVE-2026-68463

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...

CVE-2026-74736: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

PT-2026-82116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cls bpf prog from efd function where it fails to verify if a device-bound offloaded program's bound network device matches the TC network device it is being attach...

PT-2026-82128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the list:set garbage collection GC and the swap operation. The function ip set put byindex resolves an index to a set...

CVE-2026-74748: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount race between list:set GC and swap ipsetputbyindex resolved the index to a set pointer under RCU, then took ipsetreflock in ipsetput to decrement set-ref. ipsetswap holds that same lock while swappin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098745 advisory. In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed interrupt scenario In case of interrupt delay...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098905 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ipsetlist resize The release path of ipsetdumpdo and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099012 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUGON with WARNON in fence emission sdmav40ringemitfence contains two...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099008 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schred: Replace direct dequeue call with peek and qdiscdequeuepeeked When red qdisc ha...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098944)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098944 advisory. In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol stshndx is out of bounds The module loader doesn't check...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098788 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing The Extended Supported Rate...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098857 advisory. In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098723 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebtredirecttg dereferences brportgetrcu return without a NULL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098913 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098716 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper...

Linux Distros Unpatched Vulnerability : CVE-2026-74748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: fix refcount race between list:set GC and swap ipsetputbyindex resolved the index to a set pointer under RCU, then took ipsetreflock in ipsetp...