CVE-2026-72428: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

PT-2026-72614

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup clean func state cleans dead stack slots in 4-byte halves. When the high half of a STACK SPILL slot is dead and the low half remains live, cleanup converts the live lo...

PT-2026-72217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the RISC-V kernel when reading a word from the stack during a kretprobe. This happens because the arch rethook trampoline function fails to save the stack pointer sp in...

Linux Distros Unpatched Vulnerability : CVE-2026-72392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash...

Linux Distros Unpatched Vulnerability : CVE-2026-74576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b...

Linux Distros Unpatched Vulnerability : CVE-2026-74569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and...

CVE-2026-72215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72433: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftmetabridge: fix NFTMETABRIIIFPVID stack leak This needs to test for nonzero retval...

CVE-2026-72194: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indxfindbuffer to prevent stack overflow indxfindbuffer recursively descends the B+ tree index with no depth limit. A crafted NTFS image with circular index node references causes unbounded recursion,...

CVE-2026-72481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2csmbusreadi2cblockdataoremulated...

PT-2026-72173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the device property component where the fwnode init function fails to initialize all fields of the fwnode handle structure. When a firmware node is allocated on the...

PT-2026-72233

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix stack buffer overflow in multichannel session-key copy Commit 4b706360ffb7 "ksmbd: fix multichannel binding and enforce channel limit" moved the binding-path session key out of the session-wide sess-sess key CIFS KEY...

CVE-2026-74382: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: prevent unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in clsbpfoffloadcmd. Reproducer on netdevsim: add a skipsw clsbpf filter, set the bpftcaccept debugfs knob to 0, then tc filt...

Linux Distros Unpatched Vulnerability : CVE-2026-74268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the listener's bpfsockopscbflags via skclonelock. If its setup fails in...

Linux Distros Unpatched Vulnerability : CVE-2026-74500

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix stack info leak in RME Digiface status sndrmedigifacereadstatus reads a four- word status block from the device into an uninitialised...

CVE-2026-74576: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b "mm/slab: avoid allocating slabobjext array from its own slab" avoided recursive allocation of objexts from kmalloc caches of the same...

PT-2026-73028

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the slab memory allocator where cycles can form between kmalloc caches of different sizes when allocating obj exts arrays used for memory allocation profiling and memc...

CVE-2026-72479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

CVE-2026-72433: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftmetabridge: fix NFTMETABRIIIFPVID stack leak This needs to test for nonzero retval...

PT-2026-72952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the ALSA usb-audio component specifically affecting RME Digiface status. The function snd rme digiface read status reads a status block into an uninitialize...