PT-2026-72262

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300 delete freeing the mmc host when the last reference is dropped. The probe error path after th...

PT-2026-72787

In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in locking state The locking state debugfs iterator snapshots struct ocfs2 lock res by value under ocfs2 dlm tracking lock and later formats that copy in ocfs2 dlm seq show. That is fine fo...

PT-2026-72784

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for locking state debugfs open debug lockres open copies inode-i private into struct debug lockres and debug lockres release later drops that pointer with dlm put. That only works if open successfully pin...

PT-2026-72516

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna umap lifetime race amdxdna umap release calls the blocking mmu interval notifier remove before removing the object from abo-mem.umap list. If aie2 populate range runs concurrently, it may obta...

PT-2026-72637

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list del corruption in kfd criu resume svm The cleanup tail of kfd criu resume svm walks svms-criu svm metadata list and kfrees each struct criu svm metadata without removing it from the list. The list head is lef...

PT-2026-72992

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2cap le connect rsp l2cap le connect rsp obtains a channel via l2cap get chan by ident but neither holds a reference nor uses l2cap chan hold unless zero before locking and operating on it. A...

PT-2026-72962

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authentication failure callbacks look up the pending MGMT OP PAIR DEVICE command by walking hdev-mgmt pending. The lookup returned a command that wa...

PT-2026-72615

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF F PREORDER replace effective prog and purge effective progs located the slot in the effective array by walking the program hlist and counting entries linearly. That count does not matc...

PT-2026-72806

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luo session retrieve Extend the scope of the rwsem read lock in luo session retrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freein...

PT-2026-72314

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEV UNREGISTER isotp release looked up the bound network device via dev get by index using the stored ifindex. During device unregistration the device is unlisted from the...

PT-2026-72823

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with event input event process midi borrows msynth-output rfile.output and then passes the substream to dump midi and snd rawmidi kernel write without synchronizing with the output...

PT-2026-72799

In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs commit 4f375ade6aa9 "bpf: Avoid RCU context warning when unpinning htab with internal structs" moved inode cleanup from -free inode into -destroy inode to avoid sleepin...

PT-2026-72990

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso connect ind Accessing iso pisk-conn requires lock sock, which is not taken in the "ev3" part of iso connect ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states...

SUSE SLES16 Security Update : nodejs22 (SUSE-SU-2026:23130-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23130-1 advisory. Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF a...

Linux Distros Unpatched Vulnerability : CVE-2026-74489

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tidtx use-after- free on BA session stop ieee80211stoptxbacb hands tidt...

Linux Distros Unpatched Vulnerability : CVE-2026-74501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface...

Linux Distros Unpatched Vulnerability : CVE-2026-72125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex...

PT-2026-72993

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso data always when detaching conn from hcon When setting conn-hcon = NULL, also conn-hcon-iso data = NULL is necessary, otherwise later iso conn free will UAF. Fix clearing of iso data in iso sock disconn...

PT-2026-72940

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex 11n dispatch amsdu pkt splits an A-MSDU with ieee80211 amsdu to 8023s and walks the resulting subframes. For each subframe it passes the subframe data...

PT-2026-72972

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopf group alloc links each last-page IOPF group into the generic IOPF pending list before invoking the domain fault handler. iommufd fault iopf handler also queued an accepted group in...