PT-2026-72907

In the Linux kernel, the following vulnerability has been resolved: can: peak usb: validate uCAN receive record lengths pcan usb fd decode buf walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before...

PT-2026-72638

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrm selector match due to AF UNSPEC selector with large prefixlen e.g. 128 matched against IPv4 flow when XFRM STATE AF UNSPEC is...

PT-2026-72415

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num dests header Before the access to struct batadv tvlv mcast tracker's num dests, it is attempted to check whether enough space is actually in the network header. But instead of using...

PT-2026-72926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN implementation where pskb may pull was used instead of pskb network may pull to verify the availability of network layer headers, such as ARP, IPv6/ND, and...

CVE-2026-74349: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...

PT-2026-72387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where resident $INDEX ROOT values are not fully validated during lookup. The index header fields, which are consumed by callers after lookup, lacked...

PT-2026-72730

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with snd soc enum item to val before checking whether the value is valid for the enumeration. Reject...

PT-2026-72308

In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm tx lock usage for data and timer updates Stage new CAN frame content for an existing tx op into a kmalloc'd buffer and validate it there, mirroring the approach already used in bcm rx setup. Only copy the...

Linux Distros Unpatched Vulnerability : CVE-2026-72065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is...

Linux Distros Unpatched Vulnerability : CVE-2026-74451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared...

Linux Distros Unpatched Vulnerability : CVE-2026-74532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is lon...

PT-2026-72603

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in ge put enum double ge put enum double passes the user-supplied enumeration index item0 to snd soc enum item to val without checking it against the number of items in the enum: ret = snd...

PT-2026-72912

In the Linux kernel, the following vulnerability has been resolved: can: ems usb: validate CPC message lengths ems usb read bulk callback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover...

PT-2026-72539

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdr flags len, but guehdr priv flags len currently...

PT-2026-72538

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt u32: reject invalid shift counts u32 match it executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during...

CVE-2026-72206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform stricter validation of INDEXHEADER geometry in INDX blocks, and update ntfslookupinodebyname to use that function to validate INDX blocks...

CVE-2026-74460: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...

PT-2026-72723

In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctp verify asconf and sctp verify param only validate ADD IP, DEL IP, and SET PRIMARY parameters against a fixed minimum size of sizeofstruct sctp addip param + sizeofstruct sctp...

PT-2026-72303

In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm rx setup for RTR replies bcm tx setup validates cf-len against the CAN/CAN FD DLC limits before installing frames for TX SETUP, but bcm rx setup never did the same for the RTR-reply frame...

PT-2026-72728

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210 ahub: Validate written enum value tegra ahub put value enum reads e-valuesitem0 before checking whether item0 is within the enum item range. The existing check therefore happens too late to prevent an...