CVE-2026-74744 is a medium severity vulnerability related to the ipvlan network driver in Microsoft products. The issue involves inheriting needed_headroom and needed_tailroom parameters from the physical device (phy_dev). The vulnerability affects specific versions of the Microsoft product listed. No exploit in the wild or patch information is provided.
A vulnerability identified as CVE-2026-74737 affects certain Microsoft-related software versions involving the ethernet ti am65-cpsw-nuss driver, specifically related to incorrect port_id extraction from the SRC TAG. The issue has been assigned a medium severity level. The affected versions include multiple specific builds primarily in the 4.15.0 and 5.x series. There is no explicit patch or remediation information provided in the available data. No known exploits in the wild have been reported. The vulnerability is not related to a cloud service and no vendor advisory confirming patch status is included.
A vulnerability identified as CVE-2026-80526 affects specific versions of Microsoft software related to ASoC: tas2562, involving validation of values for volume writes. The issue is categorized as medium severity. No exploit in the wild has been reported, and no patch or remediation details are provided in the available data.
This vulnerability involves the openrisc signal handling mechanism where privileged status register (SR) bits are improperly restored during the sigreturn process. It affects specific Microsoft-related software versions listed and has been assigned a medium severity level. No CVSS score is provided. There is no information about available patches or exploits in the wild.
A vulnerability exists in libceph affecting multiple specific versions, involving unsafe decoding in the decode_locker() function. This issue has been identified and assigned CVE-2026-80561. The severity is assessed as medium. No information about active exploitation or patch availability is provided.
CVE-2026-74753 is a medium severity vulnerability affecting specific versions of Microsoft software. The issue relates to the 'perf' subsystem rejecting exited events as group leaders. The vulnerability affects multiple specific versions, including several 4.15.x and 5.x builds. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.
This vulnerability involves the Multipath TCP (mptcp) implementation where the DSS (Data Sequence Signal) fields are reset in case of unexpected size. It affects specific versions of Microsoft software. The severity is assessed as medium. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.
A use-after-free vulnerability exists in the mac802154 component's beacon worker related to netdev usage. This vulnerability affects specific Microsoft-related versions of the software. The issue could lead to stability or security problems due to improper memory handling. The severity is assessed as medium. No CVSS score is provided. No known exploits are reported in the wild. The vulnerability is not related to a cloud service. No official patch or remediation details are provided in the input data.
This vulnerability involves the net/sched component's cls_api in Microsoft products, where the rtnl_lock is not always acquired when destroying locked classifiers. This could lead to potential issues in the handling of network scheduling classifiers. The vulnerability affects specific Microsoft product versions listed. The severity is assessed as medium.
CVE-2026-74662 is a medium severity vulnerability affecting specific Microsoft product versions 4.4.0-1002.2 through 4.4.0-1031.34. The vulnerability is related to the inet: frags component, specifically involving the publishing of queues before arming a timer. No CVSS score is provided, and there is no information about active exploitation or available patches. The vendor advisory does not specify remediation status or mitigation steps.
CVE-2026-74595 is a medium severity vulnerability related to the fscrypt component in Microsoft products. It involves the use of the mount idmap for the owner check in the fscrypt_ioctl_set_policy() function. The vulnerability affects specific versions of Microsoft software as listed. No CVSS score is provided, and there is no indication of known exploits in the wild. Patch or remediation details are not provided in the available data.
An out-of-bounds write vulnerability exists in the ipvs component, specifically in the ip_vs_nat_icmp function. This vulnerability affects multiple specific versions of the Microsoft product listed. The issue could potentially lead to memory corruption. The severity is assessed as medium. No CVSS score is provided. There is no information about known exploits or patch availability.
A vulnerability identified as CVE-2026-74623 affects specific Microsoft software versions involving the 'net: atlantic' component, where stranded transmit (TX) buffers are not properly freed during ring deinitialization. This issue could lead to resource leaks or degraded network performance. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or exploits in the wild.
This vulnerability, identified as CVE-2026-74624, involves the netfilter component's nf_conntrack module where invalid log entries are deferred until after unlocking. It affects specific versions of Microsoft-related software builds. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or active exploitation. The affected versions are explicitly listed. No geographic targeting is indicated.
CVE-2026-74632 is a medium severity vulnerability related to a race condition in the huge memory zero page frame number (huge_zero_pfn) handling in Microsoft software. The issue involves a race condition that could potentially affect memory management. Specific affected versions include various Microsoft kernel versions identified by exact build numbers. No CVSS score is available for this vulnerability. There is no information about active exploitation in the wild or vendor-provided patches in the provided data.
A use-after-free vulnerability exists in the SMB client component within the cifs_try_adding_channels() function. This vulnerability affects specific versions of Microsoft software as listed. The issue could potentially lead to memory corruption or instability. No CVSS score is provided, but the severity is assessed as medium. There are no known exploits in the wild. The affected software versions are explicitly identified. No cloud service is involved, and no vendor advisory patch information is available in the provided data.
This vulnerability concerns the overlay filesystem (ovl) component where a warning is suppressed when a mount operation is completed from another user namespace. It affects specific versions of Microsoft-related software builds. The severity is assessed as medium. No CVSS score is provided. There is no information on active exploitation or patch availability.
A medium severity vulnerability identified as CVE-2026-74631 affects specific Microsoft software versions related to the net: smc component, specifically addressing a splice entry lifetime imbalance in smc_rx_splice. The vulnerability impacts multiple exact versions of the software as listed. No CVSS score is provided, and no known exploits in the wild have been reported. There is no explicit patch or remediation information available in the provided data.
This vulnerability involves the network scheduler (net/sched) component rejecting overly deep queuing discipline (qdisc) hierarchies. It affects specific versions of Microsoft-related software as listed. The severity is assessed as medium. No CVSS score is provided, and no known exploits are reported in the wild. Patch status is not confirmed from the provided data.
This vulnerability involves the KVM (Kernel-based Virtual Machine) component's SVM (Secure Virtual Machine) feature, specifically related to serialization of accesses to the owner and mirror list using separate locks. It affects multiple specific versions of Microsoft-related software builds. The issue has been assigned CVE-2026-74607 and is rated with medium severity. No CVSS score is provided. There is no information about known exploits in the wild or available patches. The vulnerability is relevant to various Ubuntu LTS versions as indicated by tags, but no geographic targeting is specified.