Linux Distros Unpatched Vulnerability : CVE-2026-72231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This...

CVE-2026-12629

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

CVE-2026-12629 PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

EUVD-2026-60266

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

CVE-2026-12629

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

CVE-2026-12629

The Zephyr RTOS ARM PL011 UART driver's pl011_isr() only cleared CTS interrupts, never writing UARTICR for error bits. An attacker controlling a serial peer can inject line errors to trigger a permanent interrupt-storm livelock (availability DoS), CVSS 4.6 (MEDIUM). Fix commit: https://github.com...

CVE-2026-12629 PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service

The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...

PT-2026-76711

The ARM PL011 UART driver in drivers/serial/uart pl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011 IMSC ERROR MASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears t...

CVE-2026-72231

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

CVE-2026-72231

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

UBUNTU-CVE-2026-72231

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

CVE-2026-72231

CVE-2026-72231 affects the Linux kernel’s batman-adv TT (traffic test) logic. The vulnerability arises in batadv_send_tt_request(), which previously allocated a tt_req_node for a destination originator, potentially allowing multiple TT requests to be sent concurrently. The issue is that a send-bu...

CVE-2026-72231 batman-adv: tt: avoid request storms during pending request

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

EUVD-2026-59130

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...

PT-2026-73002

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inet getpeer v4 or inet getpeer v6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

PT-2026-72419

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv send tt request allocates a tt req node when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same...

UBUNTU-CVE-2026-68395

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-68395

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

CVE-2026-68395 ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered satadwcenableinterrupts is called before platformgetirq and atahostactivate, leaving the SATA controller's interrupt mask enabled without a registered...

PT-2026-66770

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6 route packet subsys/net/ip were affected: the explicit-route path net route packet and the on-link cross-interface path net route packet if. Each set the packet...