Linux Distros Unpatched Vulnerability : CVE-2026-72389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bridge: stp: Fix a potential use-after-free when deleting a bridge The three STP timers are not supposed to be armed while the bridge is administratively down...

Linux Distros Unpatched Vulnerability : CVE-2026-72500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during...

Linux Distros Unpatched Vulnerability : CVE-2026-72042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg...

Linux Distros Unpatched Vulnerability : CVE-2026-74387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: midi: Serialize output teardown with eventinput eventprocessmidi borrows msynth-outputrfile.output and then passes the substream to dumpmidi and...

Linux Distros Unpatched Vulnerability : CVE-2026-72383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix addrwqtimer race in sctpfreeaddrwq sctpfreeaddrwq previously removed addrwqtimer using timerdelete while holding addrwqlock. However, timerdelete does...

Linux Distros Unpatched Vulnerability : CVE-2026-74347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nfcttimeout which is used by ct extension to set the cust...

Linux Distros Unpatched Vulnerability : CVE-2026-74310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubufinfo per outstanding zerocopy TX descriptor and hands it to the backend socket. The...

Linux Distros Unpatched Vulnerability : CVE-2026-74509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Fix advertising data UAFs hcifindadvinstance returns an advinfo pointer that is valid only while hdev-lock is held. The advertising...

Linux Distros Unpatched Vulnerability : CVE-2026-72469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xprtrdma: Fix ep kref imbalance on ADDRCHANGE rpcrdmacmeventhandler falls through to the disconnected: label on RDMACMEVENTADDRCHANGE and calls rpcrdmaepput wit...

Linux Distros Unpatched Vulnerability : CVE-2026-72493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: serialize netifrunning check in enqueuetobacklog Syzbot reported a KASAN slab-use-after-free in fibruleslookup. The root cause is a race condition where...

Linux Distros Unpatched Vulnerability : CVE-2026-74257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sockmap: Fix use-after-free in udpbpfrecvmsg syzbot reported use-after-free of struct skmsg in skmsgrecvmsg. 0 skmsgrecvmsg peeks skmsg from psock-ingressmsg...

PT-2026-72593

In the Linux kernel, the following vulnerability has been resolved: net: udp tunnel: prevent double queueing in udp tunnel nic device sync Yue Sun reported a use-after-free and debugobjects warning in udp tunnel nic device sync work during concurrent device operations. The workqueue core clears t...

PT-2026-72470

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm io bus get dev locking responsibilities to callers kvm io bus get dev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected...

PT-2026-73016

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt hashlimit: validate hashtable supports XT HASHLIMIT RATE MATCH The XT HASHLIMIT RATE MATCH flag mode changes the semantics of the dsthash ent structure which represents an entry in the hashtable. There is a union ar...

PT-2026-72750

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpf obj free fields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

PT-2026-72260

In the Linux kernel, the following vulnerability has been resolved: tracing/user events: Fix use-after-free in user event mm dup user event mm dup walks the parent mm's enabler list locklessly under rcu read lock during fork from copy process; it does not take event mutex: rcu read lock; list for...

PT-2026-72693

In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udp bpf recvmsg syzbot reported use-after-free of struct sk msg in sk msg recvmsg. 0 sk msg recvmsg peeks sk msg from psock-ingress msg under a lock, but its processing is lockless. Thus, sk msg...

PT-2026-72359

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register device links a new slram mtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtd device register fails, the...

PT-2026-72738

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Fix UAF in hci unregister dev hci unregister dev does not disable cmd timer and ncmd timer before the hci dev structure is freed. If a timeout fires during device teardown, the callback dereferences freed...

PT-2026-72315

In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize rcu in isotp release isotp notify unregisters the RCU CAN filters via can rx unregister and clears so-bound without waiting for a grace period. isotp release uses so-bound to decide wheth...