CVE-2026-72424

CVE-2026-72424 concerns the Linux kernel RTC MSC313 driver. The vulnerability arises when msc313_rtc_probe() calls devm_request_irq() with IRQF_SHARED and the cookie set to &pdev->dev, while platform_set_drvdata() runs later after clock setup. Under a shared IRQ line, another device can fire t...

CVE-2026-72425

In Linux kernel, filtering/redirect (ice) driver had a resource leak in CTRL VSIs when resetting all VFs with FDIR filters enabled. The root cause was CTRL VSIs being invalidated but not freed during ice_reset_all_vfs(); the fix calls ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vs...

CVE-2026-72423

The CVE-2026-72423 vulnerability affects the Linux kernel’s BPF conntrack error reporting: wrappers for conntrack kfuncs may write to opts->error outside the verifier-checked range, for certain sizes. The issue occurs when using an opts pointer with an accompanying opts__sz argument; the verif...

CVE-2026-72422

Summary: CVE-2026-72422 fixes a use-after-free in ksmbd’s handling of conn->preauth_info during concurrent SMB2 NEGOTIATE on the same Linux kernel connection. The issue arose because the preauth_info state (shared across the negotiate and response paths) could be freed while a concurrent send-...

CVE-2026-72421

CVE-2026-72421 : In the Linux kernel, a logic flaw in IPv4 route lookup under CONFIG_IP_MULTIPLE_TABLES can cause an error route from a merged local/main table to be overwritten by a route in the default table when no rule is added. The issue occurs in fib_lookup() where two tables are searched a...

CVE-2026-72419

The CVE-2026-72419 entry concerns the Linux kernel, specifically netfilter nf_nat/nf_tables paths. Description shows a fix for an invalid nat_net pointer use that could occur after nf_nat_init() fails, with an observed KASAN slab-out-of-bounds report in nf_nat_register_fn guarded by nf_tables cod...

CVE-2026-72420

CVE-2026-72420 : In the Linux kernel, a race was reported between md/raid5 break_stripe_batch_list and raid5_make_request, involving sh->dev[i].flags (non-atomic write vs. atomic bit op) that could trigger a data race on R5_Overlap. The public descriptions provide a scenario where CPU1 clears ...

CVE-2026-72418

The CVE relates to the Linux kernel netfilter nf_conncount/conns tracking fix for connlimit soft-limiting. A regression allowed valid connections to be dropped when a new connection reused a socket in TIME_WAIT, because an assumed-confirmed entry could trigger a garbage-collection-driven drop. Th...

CVE-2026-72417

The CVE-2026-72417 entry concerns the Linux kernel netfilter flowtable path, specifically nf_flow_ip4_tunnel_proto(). The vulnerability arises from processing IPv4 headers without validating iph->ihl, risking out-of-bounds access when headers are malformed. The fix adds a sanity check on iph-&...

CVE-2026-72415

Technical details about CVE-2026-72415 are not publicly available in the provided documents; monitor for updates.

CVE-2026-72416

CVE-2026-72416 affects the Linux kernel netfilter layer (nft_compat) used for ebtables emulation. The issue is that ebtables emulation must reject non-bridge targets, but the nft_compat layer did not enforce this, allowing incompatible verdicts (EBT_* vs NF_*). The commit already enforcing this f...

CVE-2026-72414

The CVE-2026-72414 entry concerns the Linux kernel component net: dsa: sja1105. The issue arises when pin_duration, derived from a user-provided period, is converted to SJA1105 clock ticks and passed as the cycle_time to future_base_time(); very small values can become zero, causing a division by...

CVE-2026-72412

The CVE-2026-72412 entry concerns the Linux kernel s390/mm subsystem and the _PAGE_UNUSED (PAGE_UNUSED) PTE bit. Root cause: KVM could set the bit for unmapped guest pages; later paths could leave it set, so present pages might be treated as unused, risking guest corruption. The fix implemented i...

CVE-2026-72413

The CVE-2026-72413 entry describes a Linux kernel SCTP issue where an err_chunk allocated during INIT handling in sctp_verify_init() could leak in multiple code paths (INIT handling in sctp_sf_do_5_1B_init and sctp_sf_do_unexpected_init, including the success path). The workaround/mitigation is t...

CVE-2026-72411

The CVE-2026-72411 issue affects the Linux kernel’s DSA mxl862xx code. A use-after-free could occur when handling an MDIO CRC error: mxl862xx_crc_err_work_fn() iterates DSA ports and closes CPU conduits, while mxl862xx_remove() unregisters the switch and cancels the work. If CRC error work runs a...

CVE-2026-72410

In the Linux kernel, the octeontx2-af component fixes an issue where the NIX maximum number of LFs could be set via devlink before any LFs were assigned to a PF/VF. The root cause was an incorrect condition used to determine if LFs were assigned; the patch corrects this check. This vulnerability ...

CVE-2026-72409

CVE-2026-72409 — Linux kernel mvneta per-CPU interrupt resume issue Affected: Linux kernel running on Marvell MPIC platforms (Armada 370/XP/38x) with mvneta NIC driver.Root cause: During NAPI, the ISR disables the per-CPU interrupt (disable_percpu_irq) and schedules NAPI poll; if suspend occurs b...

CVE-2026-72408

Summary of the CVE-2026-72408 vulnerability (Linux kernel): The issue, in geneve GRO handling, arises when geneve_gro_complete() processes a GRO hint unconditionally while geneve_gro_receive() may honor the hint only if gs->gro_hint is enabled. This mismatch allowed an attacker-supplied GRO hi...

CVE-2026-72406

CVE-2026-72406 relates to the Linux kernel sungem driver. The issue occurred during probe error handling: gem_init_one() could call gem_remove_one() on register_netdev() failure and then fall through to cleanup, potentially freeing the same resources twice (DMA block, MMIO, PCI regions, net_devic...

CVE-2026-72407

The CVE describes a Linux kernel vulnerability in geneve GRO handling where geneve_gro_complete() could derive a dispatch offset from stale or conflicting state (gs->gro_hint) vs the actual inner header parsed by geneve_gro_receive(), potentially leading to out-of-bounds processing. The fix en...