CVE-2026-74558: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

PT-2026-73012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer leak exists in the xsk drop skb function during AF XDP multi-buffer Tx operations. The issue occurs when a partially built multi-buffer skb is discarded in three scenarios: when...

PT-2026-73010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zero-copy ZC Tx batch path where the parser stops upon encountering an invalid descriptor. If this occurs after continuation descriptors, the Tx consumer may advan...

PT-2026-72759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A token leak occurs in the mt7996 driver within the mt7996 tx prepare skb function. The issue arises when the lookup for link conf or link sta fails, causing the driver to leak a...

PT-2026-72761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt76 wifi driver where the mt76 put vif phy link function frees the offchannel mlink using kfree immediately after rcu assign pointerNULL. Because rcu assign point...

PT-2026-72307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists within the bcm rx handler function when two CAN frames are received and processed simultaneously in a single rx operation by two different CPUs. This issue occurs...

PT-2026-72245

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description A resource leak occurs in the net: ena component. The function create queues with size backoff creates XDP TX queues before the regular TX path is established. If the subsequent allocation or...

PT-2026-72947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the igbvf driver during TX DMA error cleanup. When an error occurs while mapping TX buffers, the driver fails to correctly unmap all buffers already mapped for th...

PT-2026-72581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the fbnic tx lso function. The function calls skb cow head, which can reallocate the socket buffer skb, including its shared...

CVE-2026-74525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...

Linux Distros Unpatched Vulnerability : CVE-2026-74523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink...

CVE-2026-74495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

CVE-2026-74523: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

PT-2026-72206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The MACB driver leaks outgoing SKBs Socket Buffers, which are data structures used to manage network packets that have not been marked as completed. These buffers reside in queue-tx skb...

PT-2026-72977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net: sxgbe component. When the init dma desc rings function fails to allocate RX descriptor rings, it only frees the partially allocated RX rings. Consequentl...

SUSE CVE-2026-68296

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=6335440391831552 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x799c131e146...

SUSE CVE-2026-68120

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

Denial-of-service (DoS)

Spring Cloud Sleuth is vulnerable to a Denial-of-service DoS. The vulnerability is due to specially crafted calls that can trigger a DoS condition when org.springframework.cloud:spring-cloud-sleuth-instrumentation is used with Spring TX instrumentation enabled, allowing an attacker to exploit the...

Linux Distros Unpatched Vulnerability : CVE-2026-68120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet...