PT-2026-72842

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan gro prepare receive. udp tunnel sock release could set sk-sk user data to NULL while vxlan gro prepare receive is running. Let's check if rcu dereference sk user data is NULL after skb...

PT-2026-72286

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dm verity loadpin is bdev trusted if the device has no table...

PT-2026-72530

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5e hv vhca stats create registers the stats agent through mlx5 hv vhca agent create. The helper publishes the agent in hv vhca-agentstype under agents lock and immediately...

Linux Distros Unpatched Vulnerability : CVE-2026-74290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsflow: Dont expose folded kernel pointers The flow classifier falls back to addrfold for fields that are missing from packet headers. In map mode,...

PT-2026-72173

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode handle in fwnode init If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroi...

PT-2026-72815

In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev dax kmem probe partially succeeds at least one range is mapped but a subsequent range fails request mem region or add memory driver managed, the probe...

Linux Distros Unpatched Vulnerability : CVE-2026-74491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local...

Linux Distros Unpatched Vulnerability : CVE-2026-74445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: reject DXBINDQUERY without a DX context vmwcmddxbindquery unconditionally dereferences swcontext-dxctxnode-ctx. Userspace can trigger a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-74571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-74442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver...

Linux Distros Unpatched Vulnerability : CVE-2026-74522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free in closefiletableids A ksmbdfile can remain alive after logical close while another session holds a temporary reference obtained throu...

Linux Distros Unpatched Vulnerability : CVE-2026-74461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending...

Linux Distros Unpatched Vulnerability : CVE-2026-74342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 simpexattr: use per-sb cache, kernfsxattrset and kernfsxattrget compute the cac...

Linux Distros Unpatched Vulnerability : CVE-2026-74552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after...

PT-2026-72441

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack sip: validate skb dst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relie...

Linux Distros Unpatched Vulnerability : CVE-2026-72254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftfib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base chain dereferences nftinpkt, NULL on the transmit...

Linux Distros Unpatched Vulnerability : CVE-2026-74406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set sk-skuserdata to NULL while vxlangropreparereceive is running. Let...

PT-2026-72894

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroy workqueueNULL on vkms init failure Two paths through vmw vkms init can leave vmw-crc workq NULL while still leaving the rest of the driver in a state that calls vmw vkms cleanup at module unload: 1. vmw...

PT-2026-72648

In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no new privs test aa change profile builds a replacement label with fn label build in scope before the no new privs subset check. The build helper can fail and return NULL or an ERR PTR, but the...

PT-2026-72590

In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs print bpf insn masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPF PSEUDO MAP FD and BPF PSEUDO MAP VALUE...