CVE-2026-72073 mmc: vub300: fix use-after-free on probe failure

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300delete freeing the mmc host when the last reference is dropped. The probe error path after the...

CVE-2026-72073 mmc: vub300: fix use-after-free on probe failure

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300delete freeing the mmc host when the last reference is dropped. The probe error path after the...

EUVD-2026-59031

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300delete freeing the mmc host when the last reference is dropped. The probe error path after the...

CVE-2026-72070 wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix use-after-free in lbtffreeadapter lbtffreeadapter calls timerdelete&priv-commandtimer, which does not wait for a running commandtimerfn callback. lbtffreeadapter runs on the teardown path right before...

CVE-2026-72068 posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels both rlimnew unsigned long and NSECPERSEC 1000000000L...

EUVD-2026-59026

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels both rlimnew unsigned long and NSECPERSEC 1000000000L...

CVE-2026-72068

CVE-2026-72068 affects the Linux kernel’s posix-cpu-timers, specifically the update_rlimit_cpu() path. On 32‑bit kernels, rlim_new * NSEC_PER_SEC is computed in 32-bit space, causing truncation when rlim_new > 4 seconds and leading to an incorrect (too small) nsecs value stored in the CPU time...

PT-2026-72987

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where the iso sock timeout function acquires lock sock. Synchronously disabling the timer while holding this lock can result in a...

Linux Distros Unpatched Vulnerability : CVE-2026-72116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix stale rx/tx ops after device removal RX: an RXSETUP update! for an existing op skipped canrxregister unconditionally, even when a concurrent...

Linux Distros Unpatched Vulnerability : CVE-2026-72383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix addrwqtimer race in sctpfreeaddrwq sctpfreeaddrwq previously removed addrwqtimer using timerdelete while holding addrwqlock. However, timerdelete does...

Linux Distros Unpatched Vulnerability : CVE-2026-74503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: timer: Clear SNDRVTIMERIFLGDEAD once the close completes sndtimercloselocked marks an instance with SNDRVTIMERIFLGDEAD and returns early when the flag is...

PT-2026-72310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the CAN BCM module where simultaneous access to timer and filter values can occur. Specifically, bcm rx setup can overwrite values while bcm rx handler, bcm rx...

PT-2026-72257

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the update rlimit cpu function where the RLIMIT CPU value is converted to nanoseconds using 32-bit multiplication on 32-bit kernels. Because both rlim new and NSEC PER...

PT-2026-72738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth component. The hci unregister dev function fails to disable cmd timer and ncmd timer before the hci dev structure is freed. If a timeout...

PT-2026-72511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition occurs between device teardown in inetdev destroy and incoming IGMP query processing in igmp rcv, resulting in a Use-After-Free UAF within the IGMP timer callback. Durin...

Linux Distros Unpatched Vulnerability : CVE-2026-74535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: avoid deadlocks in isosocktimeout isosocktimeout takes locksock, so sync disabling the timer while holding that lock may deadlock. isosocktimeou...

PT-2026-72750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where map update and delete paths call the bpf obj free fields function when a value is replaced or recycled. This causes field destruction to depend...

PT-2026-72315

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ISO-TP implementation of the CAN protocol. The isotp notify function unregisters CAN filters via can rx unregister and clears the so-bound variable without...

PT-2026-72955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA timer component where the snd timer close locked function marks an instance with the SNDRV TIMER IFLG DEAD flag but fails to clear it upon completion. This ca...

CVE-2026-72126: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronizercu in isotprelease isotpnotify unregisters the RCU CAN filters via canrxunregister and clears so-bound without waiting for a grace period. isotprelease uses so-bound to decide whether it...