Linux Distros Unpatched Vulnerability : CVE-2026-74614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b vsock/virtio: add support for device suspend/resume made the run flags transition from fals...

Linux Distros Unpatched Vulnerability : CVE-2026-74684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp The commit 4f61f133f354 net: tap: NULL pointer derefence in devparseheaderprotocol when...

The vulnerability of the net/vmw_vsock/virtio_transport_common.c file in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the net/vmwvsock/virtiotransportcommon.c file in Linux operating systems is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74311

A flaw was found in the Linux kernel. During a system restore operation, the virtio real-time clock RTC component fails to properly manage virtual queues virtqueues. If the reinitialization of these virtqueues fails, the system attempts to delete queues using incorrect memory references. This can...

Linux Distros Unpatched Vulnerability : CVE-2026-74311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore...

ANT-2026-PQ3CNCCK · firecracker-microvm/firecracker · Memory Safety / Out-of-Bounds Read+Write (unsafe Rust)

oob-read high CVE-2026-5747 GHSA-776c-mpj7-jm3r Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PQ3CNCCK: Virtio-PCI queue size writable after activation enables host OOB I...

CVE-2026-74481 mm/page_reporting: use system_freezable_wq to fix UAF during suspend

In the Linux kernel, the following vulnerability has been resolved: mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset their underlying virtio devices and delete their virtqueues via...

CVE-2026-74481

The CVE-2026-74481 entry describes a Linux kernel UAF/GPF during PM suspend caused by page_reporting work being scheduled on the non-freezable system_wq. Child devices (e.g., virtio_balloon) delete virtqueues as part of suspend, but page_reporting_process could still run, triggering virtballoon_f...

CVE-2026-74311

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

CVE-2026-74311

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

UBUNTU-CVE-2026-74311

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

CVE-2026-74311

CVE-2026-74311 affects the Linux kernel virtio rtc path. The bug occurs when viortc_restore() calls viortc_init_vqs() without removing old virtqueues, enabling vp_del_vqs() to reference a NULL info pointer in vp_del_vq() and crash the guest kernel during restore. The fix deletes stale virtqueues ...

CVE-2026-74311 virtio: rtc: tear down old virtqueues before restore

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

CVE-2026-74311 virtio: rtc: tear down old virtqueues before restore

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

EUVD-2026-59458

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

PT-2026-72933

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF and General Protection Fault can occur during Power Management PM freeze, such as S3 suspend or S4 hibernation. The issue arises because the page reporting process i...

PT-2026-72747

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio device restore resets the device and restores the negotiated features before calling -restore. viortc freeze intentionally leaves the existing virtqueues in place so the...

Linux Distros Unpatched Vulnerability : CVE-2026-74481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset...

SUSE CVE-2026-68255

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

CVE-2026-18171

Docker Sandboxes sbx applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged cod...