CVE-2026-72188

The CVE-2026-72188 issue affects the Linux kernel NTFS handling: ntfs_lookup_inode_by_name() can return error-marked MFT references without validation, causing callers to misinterpret a MREF_ERR() with arbitrary low bits as a valid result. The vulnerability stems from untrusted on-disk MFT refere...

CVE-2026-72188 ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

EUVD-2026-58946

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

CVE-2026-72188 ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

EUVD-2026-58937

In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populatecacheleaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final ofnodeputnp correctly drops the...

CVE-2026-72179 riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populatecacheleaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final ofnodeputnp correctly drops the...

CVE-2026-72179

The CVE-2026-72179 entry concerns the Linux kernel (riscv) cacheinfo: populate_cache_leaves. A node reference leak occurs because the final of_node_put(np) can leak the last valid node when the loop finishes with np == NULL. The fix, as documented in multiple sources, changes the final call from ...

EUVD-2026-58935

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damonsysfsaccesspatternadddirs and damonsysfsschemeadddirs...

CVE-2026-72138 xen/gntdev: fix error handling in ioctl

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

CVE-2026-72123 can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF

In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 "can: bcm: use callrcu instead of costly synchronizercu" replaced synchronizercu in bcmdeleterxop with callrcu and introduced the RXNOAUTOTIME...

CVE-2026-72040 ipmi: fix refcount leak in i_ipmi_request()

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

MINI-29X3-MXC3-5V9F

Bulletin has no description...

MINI-5GG7-5QJ6-26X4

Bulletin has no description...

EUVD-2026-58819

A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...

CVE-2026-72440: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writespending and barrier reference leaks on write failures raid1makerequest acquires a writespending reference with mdwritestart before calling raid1writerequest. Several failure paths in raid1writerequest complete...

PT-2026-72670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpib module. In the command ioctl function, an error path inside a loop decrements the descriptor busy reference counter and breaks, but execution...

PT-2026-72628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Reference leaks occur in the md/raid1 component during write failures. The raid1 make request function acquires a writes pending reference via md write start before calling raid1 write...

CVE-2026-72315: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 "cifs: Fix busy dentry used after unmounting" fixed the issue in cifs where deferred close of a file led to a dentry reference count not being released...

PT-2026-72966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 PCI component regarding memory accounting for pinned and unpinned pages. The account mem and unaccount mem functions call get uid, which increments the...

PT-2026-72402

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the cpcap-battery supply driver. In the cpcap battery detect battery type function, a reference to an nvmem device obtained through nvmem device find is not...