Linux Distros Unpatched Vulnerability : CVE-2026-74563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a scoped IPv6 interface with devgetbyindexrcu, drops the RCU...

Linux Distros Unpatched Vulnerability : CVE-2026-74314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That mak...

Linux Distros Unpatched Vulnerability : CVE-2026-72404

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix UAF in cleanupbearer due to premature dstcachedestroy TIPC UDP media bearer teardown calls dstcachedestroy on its replicast caches before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-72384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using...

Linux Distros Unpatched Vulnerability : CVE-2026-74350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate fast symlink target during inode read ocfs2validateinodeblock already rejects several inconsistent self-contained dinodes before they are expose...

Linux Distros Unpatched Vulnerability : CVE-2026-72499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Free CQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during...

Linux Distros Unpatched Vulnerability : CVE-2026-74493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock after finding a connection in lgr-connsall, but before taking a...

Linux Distros Unpatched Vulnerability : CVE-2026-74492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During...

Linux Distros Unpatched Vulnerability : CVE-2026-74510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authentication failure callbacks look up the pending MGMTOPPAIRDEVICE command b...

Linux Distros Unpatched Vulnerability : CVE-2026-72110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this ca...

Linux Distros Unpatched Vulnerability : CVE-2026-74506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix UAF when sending a message In afsmakecall, there's a race with async call reception and destruction. If a call is dispatched that doesn't have...

Linux Distros Unpatched Vulnerability : CVE-2026-72299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock...

Linux Distros Unpatched Vulnerability : CVE-2026-74289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fib: Don't dump dying fibinfo in fibleafnotify. syzbot reported use-after-free in nsimfib4prepareevent. 0 The problem is that the following functions call...

PT-2026-72408

In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq procinfo lifecycle to prevent double-free The svc release rqst function executes the callback inside rqstp-rq procinfo-pc release. However, if a worker thread begins processing a new request and encounters an...

Linux Distros Unpatched Vulnerability : CVE-2026-74511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix pending command UAF in EIR updates MGMTOPSETLOCALNAME is handled asynchronously on powered controllers and can run setnamesync. When the...

PT-2026-72680

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same client has lease same client has lease returns an opinfo pointer from ci-m op list after dropping ci-m lock without taking a reference. smb grant oplock then dereferences that pointer in copy lea...

PT-2026-72991

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso sock getname Accessing iso pisk-conn requires lock sock, which is not held here. Fix by adding the lock/release...

PT-2026-72661

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl kref formerly served two distinct lifetimes through a single refcount: it gated when a Reply could wake its RPC task, and it gated when an rpcrdma req could return to its fr...

PT-2026-72805

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix u-a-f in luo file unpreserve files and luo file finish In luo file unpreserve files and luo file finish, reorder module put and xa erase to ensure the file handler module remains pinned while its operations are...

PT-2026-72642

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3c hci addr to dev i3c hci addr to dev walks bus-devs.i3c, which is protected by bus.lock rwsem. However, it is invoked from the MIPI I3C HCI IRQ handler, which cannot take bus.lock. This allows...