CVE-2026-93043 bpf: Disallow interpreter fallback for gotox insn

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for gotox insn The interpreter does not recognize the BPFJMP|BPFJA|BPFX insn, which is used for insnarray map. Thereafter, it would hit the BUGON in bpfprogrun at run time. 2.563726 BPF...

CVE-2026-90418 nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfscopydirtypages on dirty state mismatch Syzbot reported a kernel BUG triggered within nilfscopydirtypages, which copies dirty DAT file folios/pages to its shadow page cache. The BUG occurs when a retrieved...

CVE-2026-90418

CVE-2026-90418 affects the Linux kernel's nilfs2 filesystem in the function nilfs_copy_dirty_pages() , which copies dirty DAT file folios/pages to a shadow page cache. The root cause is that the 'dirty' flag of a folio/page can be cleared asynchronously after the filesystem detects metadata corru...

EUVD-2026-82079

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfscopydirtypages on dirty state mismatch Syzbot reported a kernel BUG triggered within nilfscopydirtypages, which copies dirty DAT file folios/pages to its shadow page cache. The BUG occurs when a retrieved...

CVE-2026-90418 nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfscopydirtypages on dirty state mismatch Syzbot reported a kernel BUG triggered within nilfscopydirtypages, which copies dirty DAT file folios/pages to its shadow page cache. The BUG occurs when a retrieved...

EUVD-2026-81999

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls clkenable, which takes the common-clk enablelock. Under PREEMPTRT th...

CVE-2026-90338 serial: amba-pl011: keep console clock enabled for atomic writes

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls clkenable, which takes the common-clk enablelock. Under PREEMPTRT th...

CVE-2026-90305

CVE-2026-90305 affects the Linux kernel on ARM when PREEMPT_RT is enabled. The root cause is that commit c6e61c06d606 enabled PREEMPT_RT on ARM without selecting HAVE_POSIX_CPU_TIMERS_TASK_WORK , leaving CPU timers to expire in hard IRQ context . On PREEMPT_RT, this causes run_posix_cpu_timers() ...

CVE-2026-90305 ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK

In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVEPOSIXCPUTIMERSTASKWORK Commit c6e61c06d606 "ARM: 9463/1: Allow to enable RT" enabled PREEMPTRT on ARM but did not select HAVEPOSIXCPUTIMERSTASKWORK. This leaves CONFIGPOSIXCPUTIMERSTASKWORK disabled, so CP...

CVE-2026-90299

CVE-2026-90299 affects the Linux kernel BPF subsystem. When CONFIG_FUNCTION_ERROR_INJECTION is disabled, the BPF verifier fails to distinguish whether an attachment target symbol is a kernel function or a BPF program , allowing a sleepable tracing program to attach to a non-kernel BPF program who...

CVE-2026-90299 bpf: Fix sleepable check for tracing/lsm prog

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...

EUVD-2026-81892

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...

CVE-2026-90299 bpf: Fix sleepable check for tracing/lsm prog

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...

CVE-2026-90147 clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

EUVD-2026-81959

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address calls sparx5mcsync / sparx5mcunsync - sparx5mactlearn /...

Burpnake

-- BurpNake Autonomous AI-Driven Penetration Testing &...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-k8s: opentelemetry-collector-k8s-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-k8s-0.161.0-0.1.hum1.src src...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: unbound: python3-unbound-1.26.1-1.hum1 aarch64, x8664 unbound-1.26.1-1.hum1 aarch64, x8664 unbound-anchor-1.26.1-1.hum1 aarch64, x8664 unbound-devel-1.26.1-1.hum1 aarch64, x8664...

PT-2026-94686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amba-pl011 serial driver where the pl011 console write atomic function is called from an atomic context that prohibits sleeping. The function invokes clk enable,...

PT-2026-94653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where enabling PREEMPT RT Real-Time preemptibility without selecting HAVE POSIX CPU TIMERS TASK WORK causes CPU timers to expire in...