CVE-2026-72109

The CVE-2026-72109 issue affects the Linux kernel net: sparx5, where sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers but leaves ...

CVE-2026-72005

This CVE concerns the Linux kernel wifi rt2x00 driver. The issue arises in rt2x00lib_probe_dev() which could take a full removal teardown path (rt2x00lib_remove_dev()) for probe failures before critical resources (drv_data, workqueue, intf_work, autowakeup_work, sleep_work) were initialized. The ...

EUVD-2026-59104

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

CVE-2026-72005 wifi: rt2x00: avoid full teardown before work setup in probe

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

CVE-2026-72005 wifi: rt2x00: avoid full teardown before work setup in probe

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

PT-2026-72893

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A synchronization issue exists during port unregistration in the USB Type-C UCSI subsystem. Pending partner work items can race against workqueue destruction, resulting in use-after-free...

PT-2026-72995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the UDP tunnel NIC offload code. When device registration fails in register netdevice, the udp tunnel nic unregister function may return early if the utn-work...

PT-2026-72262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vub300 driver. The driver manages controller state lifetime using vub300-kref, where vub300 delete frees the mmc host once the last reference is...

Linux Distros Unpatched Vulnerability : CVE-2026-72337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: avoid untracked enable work lowpanenableset allocates a temporary work item and schedules doenableset on systemwq, then returns to debugfs...

PT-2026-72914

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On certain i.MX platforms, a system hang can occur during the suspend and resume process. This happens because some I2C client drivers use a periodic workqueue that continues to trigger...

PT-2026-72530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A registration race condition exists in the net/mlx5e module. The function mlx5e hv vhca stats create uses mlx5 hv vhca agent create to register a stats agent. This helper publishes the...

PT-2026-73007

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock and a race condition exist in the libsas component of the SCSI subsystem. A deadlock occurs when the PHYE RESUME TIMEOUT handler, executing on the HA event workqueue, calls sa...

Linux Distros Unpatched Vulnerability : CVE-2026-74442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver...

CVE-2026-72005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

PT-2026-72503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the Direct I/O DIO path causes a delayed dentry reference-count release. This occurs when the unmount path is triggered before the cleanup work is...

Linux Distros Unpatched Vulnerability : CVE-2026-72342

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix HV VHCA stats agent registration race mlx5ehvvhcastatscreate registers the stats agent through mlx5hvvhcaagentcreate. The helper publishes the...

Linux Distros Unpatched Vulnerability : CVE-2026-72405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork durin...

PT-2026-72695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the CIFS module during the unmounting process. When CIFS files are placed into the fileinfo put wq queue during an umount operation, the...

CVE-2026-74462: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...

PT-2026-73027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the thunderbolt component. The function tb xdp handle request runs on the system workqueue and queues xd-state work via queue delayed work during specifi...