CVE-2026-97956

A flaw was found in the Linux kernel's network failover driver, which can result in a Denial of Service DoS. When a network slave device undergoes a name change, the driver invokes an open operation that attempts to reacquire locks already held by upper-level callers. A local user capable of...

CVE-2026-97951

A flaw was found in the Linux kernel's iSCSI Internet Small Computer Systems Interface target subsystem. A remote client can trigger a Denial of Service DoS by sending remaining data packets for a write request that was aborted by a device reset command. Because the subsystem fails to signal...

CLEANSTART-2026-ZN87081 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:4392-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4392-1 advisory. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272117. -...

CVE-2026-97948

A flaw was found in the Linux kernel's PowerPC Enhanced Error Handling EEH subsystem. A recursive locking issue occurs during device reset handling when an error recovery process attempts to acquire a lock it already holds. When an error is detected on an affected device, this condition causes th...

CVE-2026-97483

A flaw was found in the Linux kernel. During error recovery or reset operations for USB storage devices connected to a root hub, the USB subsystem fails to respect memory allocation constraints during control transfers. A local user triggering device error recovery under memory pressure can cause...

CVE-2026-97619

A flaw was found in the Linux kernel's iouring subsystem. Improperly deferring write completion accounting to background task work can create a circular locking dependency when a filesystem freeze operation is performed. A local user could exploit this flaw by issuing asynchronous write operation...

CLEANSTART-2026-JI49004 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

CVE-2026-97524

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. Under specific network error and subflow reset conditions during data receive operations, the kernel can enter a recursive call loop that attempts to acquire an already-held data lock. A remote attacker communicating over an...

CVE-2026-93269

A flaw was found in the Linux kernel's ext4 file system. A local user can cause a Denial of Service DoS by triggering a deadlock during file extent migration operations. Under specific timing conditions, conflicting lock dependencies between extent migration and background inode cleanup leave...

CVE-2026-98103

A flaw was found in the Linux kernel's Internet Group Management Protocol IGMP subsystem. A recursive locking condition can occur when transmitting IGMPv3 reports over network routes configured with IPsec Internet Protocol Security policies, as the kernel attempts to acquire a spinlock that is...

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 针对 GOT-W29（HarmonyOS 4.0, kernel 4.19.157-perf+）上 CVE-2026-43499 （rtmutex/futex-PI 栈 UAF，"GhostLock"）的提权研究。 最终结论 1. 漏洞真实且可触发 ：值持有 PI 环使 FUTEXCMPREQUEUEPI 返回 -EDEADLK， 回滚路径激活 removewaiter 的 current != waiter-task 清理 bug（本内核...

CLEANSTART-2026-OE88191 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Security vulnerability affects the loki package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...

SUSE CVE-2026-98103

In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ipsflist to RCU Commit 23d2b94043ca "igmp: Add ipmclist lock in ipcheckmcrcu" added spinlockbh&im-lock to ipcheckmcrcu to prevent a use-after-free while iterating im-sources during concurrent deletions...

DEBIAN-CVE-2026-98103

In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ipsflist to RCU Commit 23d2b94043ca "igmp: Add ipmclist lock in ipcheckmcrcu" added spinlockbh&im-lock to ipcheckmcrcu to prevent a use-after-free while iterating im-sources during concurrent deletions...

AZL-104577 CVE-2026-98103 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ipsflist to RCU Commit 23d2b94043ca "igmp: Add ipmclist lock in ipcheckmcrcu" added spinlockbh&im-lock to ipcheckmcrcu to prevent a use-after-free while iterating im-sources during concurrent deletions...

CVE-2026-98103

In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ipsflist to RCU Commit 23d2b94043ca "igmp: Add ipmclist lock in ipcheckmcrcu" added spinlockbh&im-lock to ipcheckmcrcu to prevent a use-after-free while iterating im-sources during concurrent deletions...

CVE-2026-98094

In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirtylock IRQ-safe fbtftmkdirty can be reached from the fbcon rendering path while processing printk in hardirq context. Meanwhile, dirtylock is also taken by fbtftdeferredio in workqueue context with local...

DEBIAN-CVE-2026-98094

In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirtylock IRQ-safe fbtftmkdirty can be reached from the fbcon rendering path while processing printk in hardirq context. Meanwhile, dirtylock is also taken by fbtftdeferredio in workqueue context with local...