CVE-2026-72360

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FASTREQUEST nor EVENT messages as this would result in...

CVE-2026-72359 drm/xe: fix NPD in bo_meminfo()

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

CVE-2026-72359

The CVE relates to the Linux kernel DRM/XE driver. A buffer object (BO) may have its ttm.resource set to NULL during the purge step in the TTM pipeline, but the BO may remain in the client’s object list until the GEM handle is closed. If memory statistics are queried during this window, dereferen...

CVE-2026-72359 drm/xe: fix NPD in bo_meminfo()

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

EUVD-2026-59258

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

CVE-2026-72349

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtrateest: fix u64 truncation in xtrateestmt On links faster than 34 Gbps, where byte rate may exceed 2^32-1 4.3 GBps, the comparison result becomes incorrect because the truncated value no longer reflects the actual...

EUVD-2026-59245

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT. During the probe phase, the...

CVE-2026-72346 platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT. During the probe phase, the...

CVE-2026-72346 platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT. During the probe phase, the...

CVE-2026-72346

The CVE describes a NULL pointer dereference in the Linux kernel's platform/x86 bitland-mifs-wmi driver during suspend/resume. The kernel initializes two WMI devices (BITLAND_WMI_CONTROL and BITLAND_WMI_EVENT); during probe, the event path exits early, leaving data->pp_dev NULL. Global PM slee...

CVE-2026-72343 net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point priv-statsnch is still zero, because it is only ever incremented in...

CVE-2026-72344 net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5laggetdevseq will return error when the peer isn't in the LAG or when no device is marked as master. Result bad memory access and kernel crash1. Hence, skip th...

CVE-2026-72343 net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point priv-statsnch is still zero, because it is only ever incremented in...

EUVD-2026-59242

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point priv-statsnch is still zero, because it is only ever incremented in...

CVE-2026-72343

Summary: Multiple sources report in the Linux kernel net/mlx5e HV VHCA stats path a zero-sized buffer allocation bug that can lead to a fault when stats are enabled. The root cause was calling kvzalloc(0) via mlx5e_hv_vhca_stats_create() before priv->stats_nch is populated, resulting in a ZERO...

CVE-2026-72344

Summary: CVE-2026-72344 affects the Linux kernel mlx5e features for TC offloads. The issue occurs when cleaning up peer flows in a Link Aggregation Group (LAG) if the peer is not in the LAG or no master is marked, causing mlx5_lag_get_dev_seq() to return an error, which can lead to bad memory acc...

EUVD-2026-59243

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5laggetdevseq will return error when the peer isn't in the LAG or when no device is marked as master. Result bad memory access and kernel crash1. Hence, skip th...

CVE-2026-72344

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5laggetdevseq will return error when the peer isn't in the LAG or when no device is marked as master. Result bad memory access and kernel crash1. Hence, skip th...

CVE-2026-72342 net/mlx5e: Fix HV VHCA stats agent registration race

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5ehvvhcastatscreate registers the stats agent through mlx5hvvhcaagentcreate. The helper publishes the agent in hvvhca-agentstype under agentslock and immediately schedules a...

EUVD-2026-59241

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5ehvvhcastatscreate registers the stats agent through mlx5hvvhcaagentcreate. The helper publishes the agent in hvvhca-agentstype under agentslock and immediately schedules a...