CVE-2026-68470

The CVE-2026-68470 vulnerability affects the Linux kernel’s wifi/mac80211 path. It occurs when validating extension-frame layout before RX, allowing extension subtypes beyond S1G beacons to reach regular-header RX processing and potentially read header addresses. The fix narrows RX routing to han...

PT-2026-72307

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcm rx handler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

PT-2026-72261

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the net/mlx5e macsec component. When an offloaded MACsec RX SC is deleted, the macsec del rxsc ctx function frees the metadata dst object unconditionally...

PT-2026-72306

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx stamp/rx ifindex in bcm rx handler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcm rx handler can run...

PT-2026-72845

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac id in link lookup The mac id field in RX descriptors is 8 bits wide 0-255, but assoc link on macid has only RTW89 MAX MAC ID NUM 128 entries. While the driver currently assigns mac id...

PT-2026-72677

In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec rx completed In nvec rx completed, when an incomplete RX transfer is detected, nvec msg free is called to return the message back to the pool by clearing its 'used' atomic flag. Immediate...

Linux Distros Unpatched Vulnerability : CVE-2026-74478

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay header fails verifyheader, it frees the skb and continues the...

Linux Distros Unpatched Vulnerability : CVE-2026-72115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: track a single source interface for ANYDEV timeout/throttle ops An ANYDEV rx op ifindex == 0 with an active RX timeout and/or throttle timer has no...

PT-2026-72253

In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag count is greater than 1. In that case the buffers remain DMA mapped by page pool and the RX completion path does not call dma...

PT-2026-72254

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

PT-2026-72977

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init dma desc rings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same functi...

SUSE CVE-2026-68193

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...

SUSE CVE-2026-68194

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7921rxcheck and mt7921queuerxskb dispatch it to mt7921mactxfree on every bus. mt7921mactxfree cleans the DMA tx queues with...

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-14044

Open5GS

CVE-2024-14044 Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-14044 Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

EUVD-2024-55716

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

CVE-2026-68129

A flaw was found in the Linux kernel's gve driver. Under extreme memory pressure, the driver's receive Rx buffer refill process can fail, causing the number of buffers available to hardware to drop below a critical threshold. This can lead to a permanent network queue stall, where the device drop...