PT-2026-90207

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Three related issues exist in the o2hb region pin function within the ocfs2 cluster component. First, the function is called while holding the o2hb live lock spinlock, but it invokes...

CVE-2026-89735: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups on teardown fmidi2allocinst creates default configfs child groups for the default endpoint and default block using configfsadddefaultgroup, setting their internal refcount to 1...

SUSE CVE-2026-74330

In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entries from removal by another thread, but it does not protect cursors from being moved around by lseek - or freed, for that matter...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104614 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entri...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098736 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098767 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully shutting down a port via th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098792 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf return in tgptgpmembersshow targettgptgpmembersshow format...

Linux TCM Kernel Heap Buffer Overflow DoS

The vulnerability of the targetcoreitemdbrootstore function in the drivers/target/targetcoreconfigfs.c driver of the Linux operating system’s TCM kernel is related to the absence of a reference to an active descriptor or file index. Exploiting this vulnerability could allow an attacker to cause a...

Linux Kernel DRI DoS

The vulnerability of the xeconfigdevicerelease function in the drivers/gpu/drm/xe/xeconfigfs.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent device. The commit 813665564b3d “iio: core: Convert to use the firmware node handle instead of the OF node” changed the type of nodes used for label retrieval in...

CVE-2026-74359

A flaw was found in the Linux kernel's configfs component. This vulnerability occurs because a memory pointer is not properly cleared after a failure, leading to a 'use-after-free' condition. A local attacker could exploit this by interacting with the affected directory, which could cause memory...

CVE-2026-74330

A flaw was found in the Linux kernel's configfs component. This vulnerability arises from improper handling of directory traversals, where cursors can be unexpectedly moved or freed by another process even when the parent directory is locked. This lack of proper synchronization can lead to an...

Linux Distros Unpatched Vulnerability : CVE-2026-74330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfs: fix lockless traversals of -schildren Having the parent directory locked protects entries from removal by another thread, but it does not protect...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100317 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fsubset: Fix unbalanced refcnt in gethfree gethalloc increments the reference count,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099780 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a listdel on the epfgroup field of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099990 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fsubset: Fix unbalanced refcnt in gethfree gethalloc increments the reference count,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099741 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100127 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are...

CVE-2026-74359

In the Linux kernel, the following vulnerability has been resolved: configfslookup: don't leave -sdentry dangling on failure Normally -sdentry is cleared when dentry it's pointing to becomes negative on eviction, realistically. However, that only happens if dentry gets to be positive in the first...

CVE-2026-74330

In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entries from removal by another thread, but it does not protect cursors from being moved around by lseek - or freed, for that matter...