CVE-2026-74721 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

EUVD-2026-64408

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

CVE-2026-74721

A vulnerability in the Linux kernel's accel/amxdna driver (AMD DNA accelerator) involves two error paths in amdxdna_insert_pages() that incorrectly call vma->vm_ops->close(vma) before the mmap syscall returns. This prematurely drops the shmem pages_pin_count and the GEM object reference bac...

CVE-2026-74695

A reference count leak in the Linux kernel's netfilter flowtable module occurs when skb_dst_set_noref() is called on a socket buffer that already holds a ref-counted dst_entry from earlier RX or routing steps. The overwrite of skb->_skb_refdst leaks the prior reference and triggers a DEBUG_NET...

CVE-2026-74695 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfflowtable: drop existing skb dst before skbdstsetnoref Incoming skbs passing through netfilter flowtable offload hooks or XFRM offload path might already carry a ref-counted dstentry assigned during earlier RX or...

CVE-2026-74662 inet: frags: publish queues before arming timer

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

PT-2026-79700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable offload hooks and XFRM offload path. Incoming socket buffers skbs may already possess a ref-counted dst entry from previous routing or RX steps...

CVE-2026-74721: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

PT-2026-79726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdxdna insert pages function where two error paths incorrectly call vma-vm ops-closevma before returning an error code. This occurs because amdxdna gem obj mmap...

Linux Distros Unpatched Vulnerability : CVE-2026-74721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to...

CVE-2026-74695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfflowtable: drop existing skb dst before skbdstsetnoref Incoming skbs passing through netfilter flowtable offload hooks or XFRM offload path might already carry a ref-counted dstentry assigned during earlier RX or...

Linux Distros Unpatched Vulnerability : CVE-2026-74695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfflowtable: drop existing skb dst before skbdstsetnoref Incoming skbs passing through netfilter flowtable offload hooks or XFRM offload path might...

AZL-97001 CVE-2026-74581 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

CVE-2026-74288

A flaw was found in the Linux kernel's networking subsystem. During the process of dumping network routing rules fibrulesdump, a race condition could occur where a 'dying' rule one being deallocated is incorrectly accessed. This could lead to a reference count error, potentially causing a system...

kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Incorrect management of graphics memory dmafence references within the amdgpugemvaioctl function can lead to a reference count underflow and a use-after-after-free condition. A local attacker could exploit this vulnerability to trigger...

kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Incorrect management of graphics memory dmafence references within the amdgpugemvaioctl function can lead to a reference count underflow and a use-after-after-free condition. A local attacker could exploit this vulnerability to trigger...

CVE-2026-72463

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework for IPsec subsystem. This vulnerability occurs during asynchronous resumption where the xfrmrcvcb function can modify a network device without properly managing its reference count. This improper handling leads to a use-after-fre...

CVE-2026-74405

A flaw was found in the Linux kernel. A race condition exists within the Optimized Power Performance OPP subsystem, where a newly added OPP object is exposed before its internal reference count is fully initialized. A concurrent operation can then increment this uninitialized reference count,...

CVE-2026-72461

A flaw was found in the AppArmor security module of the Linux kernel. This vulnerability, a reference count leak when updating the skctx, occurs because a reference is unconditionally put by the caller even when it has been transferred. A local attacker could exploit this flaw to cause a denial o...

CVE-2026-49419

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...