CVE-2026-72015

In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...

CVE-2026-72402 bpf: Mask pseudo pointer values in verifier logs

In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs printbpfinsn masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPFPSEUDOMAPFD and BPFPSEUDOMAPVALUE...

EUVD-2026-59301

In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs printbpfinsn masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPFPSEUDOMAPFD and BPFPSEUDOMAPVALUE...

CVE-2026-72015

CVE-2026-72015 — Linux kernel fs/resctrl double-free fix The vulnerability is in the resctrl filesystem of the Linux kernel, where a pseudo-locked group’s RMID could be double-freed during unmount (rmdir_all_sub()), because RMIDs are freed for all groups and then added again to the rmid_free_lru ...

EUVD-2026-59114

In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...

CVE-2026-72015 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list

In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub unconditionally frees all RMID of all groups, resulting in a double-free of t...

PT-2026-72204

In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed when it is created. On unmount rmdir all sub unconditionally frees all RMID of all groups, resulting in a double-free of...

PT-2026-72590

In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs print bpf insn masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPF PSEUDO MAP FD and BPF PSEUDO MAP VALUE...

CVE-2026-71967

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

Linux Distros Unpatched Vulnerability : CVE-2026-71967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows...

SUSE CVE-2026-64596

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

UBUNTU-CVE-2026-64596

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

CVE-2026-64596

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

CVE-2026-64596 libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

CVE-2026-64596 libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

EUVD-2026-53783

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

CVE-2026-64596

In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 "anoninode: rework assertions", pathnoexec warns when an anonymous-inode file is mmap'd from a superblock that has not set SBINOEXEC. dma-buf...

Linux Distros Unpatched Vulnerability : CVE-2026-64596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824 anoninode: rework assertions, pathnoexec warns when an anonymous-inode file...

MAL-2026-12029 Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

CVE-2026-47882 Spring Boot DevTools remote secret generated with a non-cryptographic PRNG

When enabling Spring Boot DevTools support for a remote application target for example a Docker container or Cloud Foundry app from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret w...