EUVD-2026-59116

In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue-txskb which gets freed without remorse nor checking...

CVE-2026-68461 device property: initialize the remaining fields of fwnode_handle in fwnode_init()

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

EUVD-2026-59083

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

CVE-2026-68461

In the Linux kernel, CVE-2026-68461 is resolved by fixing fwnode_init() so that fwnode_handle and its secondary pointer are initialized (setting fwnode->secondary to NULL and initializing remaining fields). This prevents a firmware node allocated on stack/heap with non-zeroing allocation from ...

CVE-2026-68461 device property: initialize the remaining fields of fwnode_handle in fwnode_init()

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

PT-2026-72751

In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc lookup file file hash digests the first LOCKD FH HASH SIZE bytes of nfs fh.data when bucketing nlm files, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR...

PT-2026-72338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the xprt create args structure is allocated on the stack without initialization within the rpc sysfs xprt switch add xprt store function. Although some fields are...

PT-2026-72360

In the Linux kernel, the following vulnerability has been resolved: mm/mm init: fix uninitialized struct pages for ZONE DEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, section activate reuses the unoptimized boot memmap. However, compound nr pages still assum...

PT-2026-72209

In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip vs seq structs in ip vs conn new Commit 9a05475cebdd "ipvs: avoid kmem cache zalloc in ip vs conn new" changed ip vs conn new to allocate an ip vs conn object with kmem cache alloc. The function then initializ...

Linux Distros Unpatched Vulnerability : CVE-2026-72168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent...

PT-2026-72365

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in access pattern add dirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damon sysfs access pattern add dirs and damon sysfs sche...

Linux Distros Unpatched Vulnerability : CVE-2026-74399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - evm: terminate and bound the evmxattrs read buffer evmreadxattrs allocates size + 1 bytes, fills them from the list of enabled xattrs, and then passes strlentem...

Linux Distros Unpatched Vulnerability : CVE-2026-72444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flowdissector: check device type before reading ETHADDRS skbflowdissect unconditionally reads 12 bytes from ethhdrskb when FLOWDISSECTORKEYETHADDRS is requested...

Linux Distros Unpatched Vulnerability : CVE-2026-72150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: fix uninitialized xprtcreateargs structure The xprtcreateargs structure is allocated on the stack without initialization in...

PT-2026-72173

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode handle in fwnode init If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroi...

PT-2026-72971

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev name on error path dt remember or free map duplicates dev name for each map entry. If kstrdup const fails, dt free map frees dev name in all num maps entries, including entries th...

PT-2026-72667

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452 read Currently, If i2c smbus read i2c block data fails but mma8452 set runtime pm state succeeds, mma8452 read returns 0. As a result, the caller mma8452 read raw assumes the...

PT-2026-72284

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma fence dedup array robust against 0-count input dma fence dedup array returns 1 when called with num fences == 0: the for-loop body never executes, j stays at 0, and the final return ++j yields 1. This...

PT-2026-72364

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme add dirs internal error damon sysfs scheme add dirs setup the tried regions directory after the stats directory setup is completed. When the tried regions directory setup is failed, th...

Linux Distros Unpatched Vulnerability : CVE-2026-74508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: HIDP: reject frames without a transaction header hidprecvctrlframe and hidprecvintrframe read skb-data0 before checking that the L2CAP SDU contains a...