CVE-2026-74282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter sntunacked without checking that it does not exceed the number of messages...

PT-2026-72570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the ksmbd component. The parse dacl function attempts to limit the attacker-controlled Access Control Entry ACE count by comparing it with the number of...

PT-2026-72718

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Transparent Inter-Process Communication TIPC protocol where the tipc sk conn proto rcv function subtracts a peer-supplied connection acknowledgment count from the...

CVE-2026-72225: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2journalinitializefastcommit jbd2journalinitializefastcommit validates journal capacity by checking journal-jlast - numfcblks JBD2MINJOURNALBLOCKS. Both jlast and numfcblks are unsigned, so when...

CVE-2026-68479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

PT-2026-72383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the do action function within the UpdateResidentValue case of the ntfs3 file system. When the sum of lrh-attr off and lrh-redo len is less than attr-res.da...

PT-2026-72401

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatch occurs in the hugetlb cgroup charge and uncharge process. In the alloc hugetlb folio function, a single h cg pointer is used for both reserved rsvd and non-reserved hugetlb...

PT-2026-72785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 file system where the ocfs2 trim mainbm function improperly validates FITRIM ranges. The function trims the global bitmap in cluster units but only checks th...

PT-2026-72413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the jbd2 journal initialize fast commit function. The issue occurs during journal capacity validation when calculating the difference between j last and nu...

CVE-2026-72213: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...

Linux Distros Unpatched Vulnerability : CVE-2026-72085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsibackgetpendreq obtains a command tag and returns a vscsibkpend whose embedded sec...

Linux Distros Unpatched Vulnerability : CVE-2026-72225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbd2: fix integer underflow in jbd2journalinitializefastcommit jbd2journalinitializefastcommit validates journal capacity by checking journal-jlast - numfcblks...

SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2026:3614-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3614-1 advisory. Update to Java 8.0 Service Refresh 8 Fix Pack 70 bsc1273223. - CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIM...

PT-2026-72278

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ivpu component where the fw log from bo function fails to verify that the log-size is at least as large as the log-header size. Consequently, the fw log prin...

PT-2026-72379

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0-rc7 Description An issue exists in the ntfs3 driver where the indx insert into buffer function fails to properly validate the split-point offset. The hdr find split function iterates through entries using the e-size...

CVE-2026-72089: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fwlogfrombo validates the tracing buffer headersize and that the log fits within the BO, but never checks that log-size is at least log-headersize. fwlogprintbuffer th...

CVE-2026-74349: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...

Linux Distros Unpatched Vulnerability : CVE-2026-74499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write in sndusbmidiakaioutput sndusbmidiakaioutput computes its fill- loop bound bufend = ep-maxtransfer - MAXAKAISYSEXLEN - 1; as a...

Linux Distros Unpatched Vulnerability : CVE-2026-74269

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxt: fix head underflow on XDP head-grow The xdp.py test testxdpnativeadjstheadgrowdata crashes when run on a bnxt machine and also crashes in NIPA. It seems...

SUSE CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...