PT-2026-72307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists within the bcm rx handler function when two CAN frames are received and processed simultaneously in a single rx operation by two different CPUs. This issue occurs...

PT-2026-73012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer leak exists in the xsk drop skb function during AF XDP multi-buffer Tx operations. The issue occurs when a partially built multi-buffer skb is discarded in three scenarios: when...

PT-2026-73010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zero-copy ZC Tx batch path where the parser stops upon encountering an invalid descriptor. If this occurs after continuation descriptors, the Tx consumer may advan...

PT-2026-72947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the igbvf driver during TX DMA error cleanup. When an error occurs while mapping TX buffers, the driver fails to correctly unmap all buffers already mapped for th...

PT-2026-72977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net: sxgbe component. When the init dma desc rings function fails to allocate RX descriptor rings, it only frees the partially allocated RX rings. Consequentl...

CVE-2026-74560: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq to be published is invalid. Actually the severer thing is the whole...

CVE-2026-74558: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

CVE-2026-74525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...

CVE-2026-74523: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

CVE-2026-74495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

CVE-2026-72116: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device removal RX: an RXSETUP update! for an existing op skipped canrxregister unconditionally, even when a concurrent NETDEVUNREGISTER had already torn down its registration op-rxregdev == NUL...

Linux Distros Unpatched Vulnerability : CVE-2026-74523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: sync udptunnel ports outside qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink...

CVE-2026-72056: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

PT-2026-72245

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description A resource leak occurs in the net: ena component. The function create queues with size backoff creates XDP TX queues before the regular TX path is established. If the subsequent allocation or...

SUSE CVE-2026-68296

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

mongoose:fuzz: Heap-buffer-overflow in ppp_tx_frame

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=6335440391831552 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x799c131e146...

SUSE CVE-2026-68120

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

Denial-of-service (DoS)

Spring Cloud Sleuth is vulnerable to a Denial-of-service DoS. The vulnerability is due to specially crafted calls that can trigger a DoS condition when org.springframework.cloud:spring-cloud-sleuth-instrumentation is used with Spring TX instrumentation enabled, allowing an attacker to exploit the...

Linux Distros Unpatched Vulnerability : CVE-2026-68120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet...

SUSE CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...