PT-2026-72716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: marvell/octeontx component where the sg cleanup path utilizes an incorrect loop index. Specifically, it uses listi instead of listj during the unmapping of...

PT-2026-72368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the change non present huge pmd function rewrites a writable device-private PMD swap entry into a readable one without preserving the pmd swp uffd wp state. This...

PT-2026-72964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the audit system. The audit del rule function destroys e-rule.exe through audit remove mark rule before the rule is unlinked from RCU-visible filter list...

Linux Distros Unpatched Vulnerability : CVE-2026-74405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup...

Linux Distros Unpatched Vulnerability : CVE-2026-72084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESER...

Linux Distros Unpatched Vulnerability : CVE-2026-74567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: fix out-of-bounds read in keyringgetkeychunk For description-level chunks keyringgetkeychunk advances the read pointer by level sizeoflong past the inline...

Linux Distros Unpatched Vulnerability : CVE-2026-74538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: lock sk in isoconnectind Accessing isopisk-conn requires locksock, which is not taken in the ev3 part of isoconnectind. It may also be NULL if...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

Linux Distros Unpatched Vulnerability : CVE-2026-74566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while...

PT-2026-72303

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the can: bcm module where the bcm rx setup function fails to validate the frame length for RTR Remote Transmission Request replies configured via RX SETUP with RX RTR...

PT-2026-72218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the MUX downlink decoder of the iosm net device. The mux dl adb decode function processes a chain of aggregated datagram tables using offsets and lengths provided by t...

PT-2026-72874

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The sun4i ss rng component contains multiple security flaws. The function sun4i ss prng seed lacks proper locking and is susceptible to a buffer overflow. Additionally, the sun4i ss prng...

PT-2026-72485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ATM network subsystem where the check tp function fails to reject traffic classes exceeding ATM ANYCLASS. When SO ATMQOS stores the supplied Quality of Service QoS...

PT-2026-72299

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the copy process function can bail out to free task before the p-bpf storage member is properly initialized. During this process, the arch dup...

PT-2026-72544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CIFS Common Internet File System component where credits are not properly released during a failure path within the cifs issue read function. This failure to relea...

PT-2026-72712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Xilinx SPI driver regarding how the FIFO First-In, First-Out buffer size is determined. The driver incorrectly calculates the size by writing to the TX FIFO regist...

PT-2026-72827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Synthetic field helpers in the tracing component build a prefixed synthetic variable name and a generated hist command using fixed MAX FILTER STR VAL buffers. The use of the strcat...

PT-2026-72924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ublk ctrl add dev function where the kernel fails to reset specific kernel-owned fields after copying ublsrv ctrl dev info from userspace into ub-dev info...

Linux Distros Unpatched Vulnerability : CVE-2026-74493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a...

Linux Distros Unpatched Vulnerability : CVE-2026-72168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent...