CVE-2026-74662

CVE-2026-74662 is a race condition in the Linux kernel 's inet: frags (IP fragmentation) subsystem. In inet_frag_create(), the fragment queue timer is armed before the queue is inserted into the fqdir rhashtable. When the namespace fragment timeout is zero or negative, the timer can fire before t...

CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...

EUVD-2026-64565

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...

CVE-2026-74628 net/x25: fix use-after-free of the socket by its timers

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no reference on the socket and a cancel does not wait for a callback already...

CVE-2026-74628

CVE-2026-74628 is a use-after-free in the Linux kernel's net/x25 (X.25 protocol) subsystem. The root cause is that x25 timers are armed with mod_timer() and cancelled with timer_delete(), meaning a pending timer holds no reference on the socket. Because x25_heartbeat_expiry() rearms unconditional...

CVE-2026-74615

CVE-2026-74615 is a slab-use-after-free in the Linux kernel vxlan module. The root cause is that vxlan_changelink() arms the FDB ageing timer without a netif_running() check, so on a never-brought-up device the timer persists after free_netdev() releases the vxlan_dev struct, causing the timer co...

EUVD-2026-64552

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-74615 vxlan: do not arm the ageing timer on a device that is down

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-74615 vxlan: do not arm the ageing timer on a device that is down

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

SUSE CVE-2026-72323

In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown inetdevdestroy and incoming IGMP query processing igmprcv, leading to a Use-After-Free in the IGMP timer callback. During device...

PT-2026-79620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the VXLAN driver. The vxlan changelink function arms the vxlan-age timer whenever the requested ageing interval differs from the configured one,...

PT-2026-79692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the at91sam9 wdt watchdog driver where the at91 ping function rearms the watchdog timer from its callback. Because timer delete does not wait for a running callback or...

PT-2026-79667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the inet frag create function where the fragment queue timer is armed before the queue is inserted into the fqdir rhashtable. If the namespace fragment timeout is zero...

PT-2026-79599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between psi schedule rtpoll work and psi trigger destroy. Because psi schedule rtpoll work is called locklessly from the scheduler hotpath, it can conflict with t...

Linux Distros Unpatched Vulnerability : CVE-2026-74662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the...

Linux Distros Unpatched Vulnerability : CVE-2026-74687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: at91sam9wdt: prevent timer rearm during teardown at91ping rearms the watchdog timer from its callback. timerdelete neither waits for a running callbac...

Linux Distros Unpatched Vulnerability : CVE-2026-74628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no...

Linux Distros Unpatched Vulnerability : CVE-2026-74615

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the...

CVE-2026-77234 Improper input validation in FreeRTOS-Kernel timer command handling

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later...