CVE-2026-74321

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in btrfsrundelayedrefs In the beginning of the loop, we try to obtain a locked delayed ref head, if 'lockedref' is currently NULL, by calling btrfsselectrefhead, which can return an error...

CVE-2026-74320 fbdev: sm501fb: Fix buffer errors in OF binding code

In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has 'use after free', 'buffer overrun' and memory leaks. info-ediddata isn't free if the probe functions fail or if pd-defmode ...

CVE-2026-74319

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock waiting for ticket during data relocation When performing data relocation on a zoned filesystem, BTRFS can deadlock in handlereservetickets. The relocation process is waiting on a space reservation tick...

CVE-2026-74320

CVE-2026-74320 : In the Linux kernel fbdev sm501fb driver, the OF binding code had multiple memory-safety issues: use-after-free, buffer overrun, and memory leaks. The fix addresses edid_data not being freed when probes fail or def_mode is set; double-free risk when both CRT and PANEL are enabled...

EUVD-2026-59467

In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has 'use after free', 'buffer overrun' and memory leaks. info-ediddata isn't free if the probe functions fail or if pd-defmode ...

CVE-2026-74319

CVE-2026-74319 documents a deadlock in the Linux kernel's BTRFS when performing data relocation on zoned filesystems. The relocation process can deadlock while waiting for a space reservation ticket that it itself would free, because the ticket cannot be fulfilled. The fix introduces a new flush ...

CVE-2026-74319 btrfs: zoned: fix deadlock waiting for ticket during data relocation

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock waiting for ticket during data relocation When performing data relocation on a zoned filesystem, BTRFS can deadlock in handlereservetickets. The relocation process is waiting on a space reservation tick...

CVE-2026-74318

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock cloning inline extent when using flushoncommit In commit b48c980b6a7e "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit" a deadlock was fixed between reflinks and transaction...

EUVD-2026-59465

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock cloning inline extent when using flushoncommit In commit b48c980b6a7e "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit" a deadlock was fixed between reflinks and transaction...

CVE-2026-74316

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout stid, the default branch releases cllock and returns without unhashing...

CVE-2026-74317

In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netifsetxpsqueue should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with number of CPUs =64, on E610 adapter, netdev is configured with maximu...

EUVD-2026-59463

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout stid, the default branch releases cllock and returns without unhashing...

EUVD-2026-59464

In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netifsetxpsqueue should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with number of CPUs =64, on E610 adapter, netdev is configured with maximu...

CVE-2026-74317

CVE-2026-74317 : In the Linux kernel, the ixgbe driver incorrectly configures XDP TX queues via netif_set_xps_queue, causing a KASAN slab-out-of-bounds and a warning during XDP program load on systems with many CPUs. The fix is to skip XPS configuration for XDP TX queues. The vulnerability is res...

CVE-2026-74316

The CVE-2026-74316 entry describes a Linux kernel vulnerability in NFSD: nfsd4_drop_revoked_stid() has no SC_TYPE_LAYOUT handling. When a client sends FREE_STATEID for an admin-revoked layout stid, the default branch does not unhash or release the stid, leaving it in the IDR and per-client list u...

CVE-2026-74316 NFSD: Handle layout stid in nfsd4_drop_revoked_stid()

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout stid, the default branch releases cllock and returns without unhashing...

CVE-2026-74315

CVE-2026-74315 (Linux kernel) : The vulnerability arises in lockd/nlm4svc_lookup_file where file_handle hashing used the first LOCKD_FH_HASH_SIZE bytes of nfs_fh.data regardless of fh.size, causing inconsistent bucket lookups when a client presents a shorter file handle. A commit changed populati...

CVE-2026-74315 lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()

In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...

CVE-2026-74315

In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...

EUVD-2026-59462

In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svclookupfile filehash digests the first LOCKDFHHASHSIZE bytes of nfsfh.data when bucketing nlmfiles, independent of fh.size. Commit 3de744ee4e45 "lockd: Use xdrgen XDR functions fo...