PT-2026-72510

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists between device teardown and incoming MLD query processing, leading to a Use-After-Free in the MLD delayed work. During device destruction, the primary...

PT-2026-72941

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid tx use-after-free on BA session stop ieee80211 stop tx ba cb hands tid tx to kfree rcu through ieee80211 remove tid tx, and then reads tid tx-ndp after dropping sta-lock: ieee80211 remove tid txsta, tid; /...

PT-2026-72799

In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs commit 4f375ade6aa9 "bpf: Avoid RCU context warning when unpinning htab with internal structs" moved inode cleanup from -free inode into -destroy inode to avoid sleepin...

PT-2026-72623

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree rcu and rcu assign pointer Sashiko pointed out that kfree rcu was called before rcu assign pointer in handling the comment extension. Fix the order so that rcu assign pointer called first...

PT-2026-72309

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and operations sashiko-bot remarked the missing use of list add rcu in bcm rx|tx setup to have a proper initialized bcm op structure when bcm proc show traverses the bcm op's under rcu...

PT-2026-72258

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rt spin unlock function releases RCU Read-Copy-Update protection before the lock is actually unlocked. This behavior differs from regular...

PT-2026-72261

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the net/mlx5e macsec component. When an offloaded MACsec RX SC is deleted, the macsec del rxsc ctx function frees the metadata dst object unconditionally...

PT-2026-72691

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc l2 send msg Syzbot reported a slab-use-after-free in ipvlan hard header when called from tipc l2 send msg. The root cause is that tipc disable l2 media calls synchronize net while b-media ptr is still valid...

PT-2026-72213

In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local-interfaces under RCU. The bulk hardware teardown path removes entries with list del, so an asynchronous transmit completion can...

PT-2026-72725

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib info in fib leaf notify. syzbot reported use-after-free in nsim fib4 prepare event. 0 The problem is that the following functions call fib info hold / refcount inc while dumping fib info under RCU,...

Linux Distros Unpatched Vulnerability : CVE-2026-74289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fib: Don't dump dying fibinfo in fibleafnotify. syzbot reported use-after-free in nsimfib4prepareevent. 0 The problem is that the following functions call...

Linux Distros Unpatched Vulnerability : CVE-2026-72069

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the...

Linux Distros Unpatched Vulnerability : CVE-2026-72436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: Don't use testbit in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using testbit which is a...

Linux Distros Unpatched Vulnerability : CVE-2026-74465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs...

Linux Distros Unpatched Vulnerability : CVE-2026-72323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown inetdevdestroy and incoming IGMP query processing igmprcv,...

Linux Distros Unpatched Vulnerability : CVE-2026-74489

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tidtx use-after- free on BA session stop ieee80211stoptxbacb hands tidt...

Linux Distros Unpatched Vulnerability : CVE-2026-74563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a scoped IPv6 interface with devgetbyindexrcu, drops the RCU...

PT-2026-72509

In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in igmp mod timer and igmp stop timer When a timer is deleted and not re-armed in igmp mod timer, or stopped in igmp stop timer, the code currently decrements the reference counter of the...

PT-2026-72201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing/osnoise component where the synchronize rcu function is not called during unregistration. This failure to synchronize allows the reference on the tracer to...

Linux Distros Unpatched Vulnerability : CVE-2026-72463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-d...