PT-2026-72495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp vrs lpm tree replace function. When this function fails after replacing some Virtual Routers VRs, the error rollback loop fails to update th...

PT-2026-72649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the AppArmor module when updating the socket context. The update sk ctx function transfers the plabel reference, but the caller also unconditionally...

PT-2026-72752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System server NFSD where the nfsd4 drop revoked stid function lacks a case for SC TYPE LAYOUT. When a client sends a FREE STATEID request for an...

CVE-2026-72290: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvms390giscregister registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the later setup steps fails, the...

CVE-2026-74405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup ------------------------------- ------------------------------ oppadd mutexlock...

PT-2026-72496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the mlxsw sp port lag join function. When the mlxsw sp port lag index get function fails, the system returns an error without releasing the lag reference...

PT-2026-72211

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the llc ui autobind function. The function opens a Service Access Point SAP after selecting a dynamic Logical Link Control Service Access Point LSAP. Whi...

PT-2026-72271

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the efct hw io abort function. When the efct hw reqtag alloc function fails, the error path returns -ENOSPC without releasing the reference previously...

PT-2026-72370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak occurs in the is full charged function within the charger-manager component. The issue arises when power supply get by name is used to obtain a reference to the fuel gaug...

PT-2026-72724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fib rules component where the fib rules dump function may attempt to dump a dying fib rule. This occurs because rocker router fib event calls fib rule get during a...

CVE-2026-72042: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

CVE-2026-74405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup ------------------------------- ------------------------------ oppadd mutexlock...

Linux Distros Unpatched Vulnerability : CVE-2026-74264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: watchdog: fix refcount tracking races Blamed commit converted the untracked devhold/devput calls in the watchdog code to use the tracked...

PT-2026-72983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF condition exists in the Bluetooth component. This occurs when the conn is freed while the hci sync task is running. The issue is located within the abort conn sync...

Linux Distros Unpatched Vulnerability : CVE-2026-74405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup...

CVE-2026-72040: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

PT-2026-72443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf queue component where NFQUEUE can keep a bridge private fake dst alive after the unregister process begins. This occurs because the br netfilter fake...

PT-2026-72783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter cttimeout component regarding the management of the nf ct timeout structure refcount. The system previously used a refcount for the control plane to trac...

PT-2026-72700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net watchdog code due to a lack of synchronization between netdev watchdog up and dev watchdog. The introduction of dev-watchdog dev tracker to store...

CVE-2026-72218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...