PT-2026-90451

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups on teardown f midi2 alloc inst creates default configfs child groups for the default endpoint and default block using configfs add default group, setting their internal refcount ...

PT-2026-90207

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hb live lock in o2hb region pin Patch series "ocfs2: cluster: o2hb region pin fixes", v2. This series fixes three related issues in o2hb region pin, all are from the original...

PT-2026-90448

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: Prevent deadlock during ep0 read loop Currently, ffs ep0 read holds ffs-mutex when it prepares to go to sleep waiting for an event. When no setup events are pending, it calls wait event interruptible exclusive...

CVE-2026-89732: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Prevent deadlock during ep0 read loop Currently, ffsep0read holds ffs-mutex when it prepares to go to sleep waiting for an event. When no setup events are pending, it calls waiteventinterruptibleexclusivelockedi...

CVE-2026-89735: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups on teardown fmidi2allocinst creates default configfs child groups for the default endpoint and default block using configfsadddefaultgroup, setting their internal refcount to 1...

SUSE CVE-2026-74330

In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entries from removal by another thread, but it does not protect cursors from being moved around by lseek - or freed, for that matter...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104614 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entri...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098736 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098767 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully shutting down a port via th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098792 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf return in tgptgpmembersshow targettgptgpmembersshow format...

The vulnerability of the target_core_item_dbroot_store() function in the drivers/target/target_core_configfs.c driver of the Linux operating system’s TCM kernel allows a attacker to cause a service failure.

The vulnerability of the targetcoreitemdbrootstore function in the drivers/target/targetcoreconfigfs.c driver of the Linux operating system’s TCM kernel is related to the absence of a reference to an active descriptor or file index. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the xe_config_device_release() function in the drivers/gpu/drm/xe/xe_configfs.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the xeconfigdevicerelease function in the drivers/gpu/drm/xe/xeconfigfs.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent device. The commit 813665564b3d “iio: core: Convert to use the firmware node handle instead of the OF node” changed the type of nodes used for label retrieval in...

CVE-2026-74359

A flaw was found in the Linux kernel's configfs component. This vulnerability occurs because a memory pointer is not properly cleared after a failure, leading to a 'use-after-free' condition. A local attacker could exploit this by interacting with the affected directory, which could cause memory...

CVE-2026-74330

A flaw was found in the Linux kernel's configfs component. This vulnerability arises from improper handling of directory traversals, where cursors can be unexpectedly moved or freed by another process even when the parent directory is locked. This lack of proper synchronization can lead to an...

Linux Distros Unpatched Vulnerability : CVE-2026-74330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfs: fix lockless traversals of -schildren Having the parent directory locked protects entries from removal by another thread, but it does not protect...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100127 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099741 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100317 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fsubset: Fix unbalanced refcnt in gethfree gethalloc increments the reference count,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099780 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a listdel on the epfgroup field of...