EUVD-2026-59111

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

CVE-2026-72012

CVE-2026-72012 affects the Linux kernel’s tracing/osnoise path. The underlying issue is that, during unregistering, a synchronize_rcu() call was missing, risking that RCU readers traversing the instance list may still hold references when the tracer is released. The description states that the vu...

CVE-2026-72012 tracing/osnoise: Call synchronize_rcu() when unregistering

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

PT-2026-72827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Synthetic field helpers in the tracing component build a prefixed synthetic variable name and a generated hist command using fixed MAX FILTER STR VAL buffers. The use of the strcat...

CVE-2026-72012: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

Linux Distros Unpatched Vulnerability : CVE-2026-72028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r...

Linux Distros Unpatched Vulnerability : CVE-2026-74391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed...

Linux Distros Unpatched Vulnerability : CVE-2026-72012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the...

CVE-2026-72071: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing/userevents: Fix use-after-free in usereventmmdup usereventmmdup walks the parent mm's enabler list locklessly under rcureadlock during fork from copyprocess; it does not take eventmutex: rcureadlock;...

PT-2026-72573

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the fprobe fgraph entry function. The issue occurs because the function performs two separate walks of the per-ip fprobe list under rcu read lock to...

PT-2026-72923

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The trace module add events function fails to check the return value of register event, leading it to call add event to tracers unconditionally. If register event fails for instance, due...

CVE-2026-74391: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

Linux Distros Unpatched Vulnerability : CVE-2026-74471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls...

CVE-2026-72385: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

CVE-2026-72309: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in traceremoteallocbuffer error path If page allocation fails in traceremoteallocbuffer, desc-nrcpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rbdesc will not...

CVE-2026-74425: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path now attaches the server record to an incoming call through the rxrpc peer's app data. That association is not guaranteed to exist...

SUSE CVE-2026-68174

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In 'struct traceeventcall', the 'module' pointer and the 'refcnt' atomic variable share the same memory space in a union. For dynamic events, the union member i...

SUSE CVE-2026-68177

In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enableevent" trigger Triggers are now delayed from freeing, but can still be triggered until after the RCU grace period has ended. The freeing of the enableevent data is put into the...

Linux Distros Unpatched Vulnerability : CVE-2026-68283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c tracing: Add bu...

Linux Distros Unpatched Vulnerability : CVE-2026-68177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for enableevent trigger Triggers are now delayed from freein...