PT-2026-72550

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xe pt zap ptes entry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xe pt zap ptes entry called container ofchild before checking for NULL, then...

PT-2026-72504

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata open metadata open returns NULL when kzalloc obj fails, but the caller era ctr only checks IS ERRmd. Since IS ERRNULL returns false, the NULL pointer is treated as a valid result a...

PT-2026-72861

In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path now attaches the server record to an incoming call through the rxrpc peer's app data. That association is not guaranteed to exist...

PT-2026-72607

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf nat: avoid invalid nat net pointer use on failed nf nat init We ran into below KASAN splat, which is mostly uninteresting, beside for having nf nat register fn in the call chain as a cause for the offending access:...

PT-2026-72698

In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE ONCE when changing lower socket callbacks kcm attach replaces a live lower TCP socket's sk data ready and sk write space callbacks with KCM handlers, and kcm unattach restores them later. Those callback-pointer...

PT-2026-72787

In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in locking state The locking state debugfs iterator snapshots struct ocfs2 lock res by value under ocfs2 dlm tracking lock and later formats that copy in ocfs2 dlm seq show. That is fine fo...

PT-2026-72823

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with event input event process midi borrows msynth-output rfile.output and then passes the substream to dump midi and snd rawmidi kernel write without synchronizing with the output...

PT-2026-72643

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to audit log untrustedstring Commit 4a134723f9f1 "apparmor: move check for aa null file to cover all cases" intrdouced a small bug, where path name may pass a potentially uninitialized...

PT-2026-72862

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afs get tree afs alloc sbi uses kzalloc for memory allocation. And, if ctx-dyn root is not null, as-cell and as-volume are null. In trace afs get tree they are dereferenced. KASAN error messag...

PT-2026-72430

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk socket dereference in selinux sctp bind connect selinux sctp bind connect dereferences sk-sk socket to pass a struct socket to selinux socket bind and selinux socket connect helper. However, when the hook is...

PT-2026-72439

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf nat sip: reload possible stale data pointer quoting sashiko: ------------------------------------------------------------------------ .. noticed a potential memory bug and header corruption involving the SIP NAT...

PT-2026-72335

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw edma pcie probe treats the PCI device ID driver data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can...

PT-2026-72217

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r n tty write $stack0' dynamic events $ echo 1 events/kprobes/enable...

PT-2026-72351

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h transaction deref in ocfs2 assure trans credits BUG A direct write over unwritten extents can panic the kernel in ocfs2 assure trans credits when the journal aborts during DIO completion. The crash is a general...

PT-2026-72236

In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit ca8210 test int driver write and ca8210 test int user read exchange a kmalloc'd buffer pointer through a struct kfifo, but pass a literal '4' as the byte count to kfif...

PT-2026-72575

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix potential invalid pointer deref in group process tiler oom If heaps is an ERR PTR, panthor heap pool put will deref an invalid pointer. Make sure we set it to NULL in that case...

PT-2026-72686

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt re: Avoid displaying the kernel pointer While dumping the info on MR using the rdma tool, we dump the mr hwq which is a kernel pointer. There is no need to expose this value for end user. So avoid it...

Linux Distros Unpatched Vulnerability : CVE-2026-74477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uprobes: Fix NULL pointer dereference in hprobeexpire Forking a task that has a pending uretprobe can oops the kernel with a NULL pointer dereference in the clo...

PT-2026-72614

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup clean func state cleans dead stack slots in 4-byte halves. When the high half of a STACK SPILL slot is dead and the low half remains live, cleanup converts the live lo...

PT-2026-72836

In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf set|remove dentry xattr for negative dentries bpf set dentry xattr and bpf remove dentry xattr BPF kfuncs attempt to lock the inode of the supplied dentry without checking if it is NULL. If a negative dentry...