PT-2026-104847

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi eh lock door scsi eh lock door is called from scsi restart operations while the host is still in the SHOST RECOVERY state, i.e. before the host is switched back to SHOST RUNNING...

CVE-2026-93220

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

CVE-2026-93781: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsiehlockdoor scsiehlockdoor is called from scsirestartoperations while the host is still in the SHOSTRECOVERY state, i.e. before the host is switched back to SHOSTRUNNING and...

CVE-2026-93268

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

PT-2026-104956

In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS and the storage driver may involve resetting a device. The thread doi...

CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

PT-2026-97981

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular dependency exists in the SCSI core during error handling. The function scsi eh lock door, called by scsi restart operations while the host is in the SHOST RECOVERY state, uses...

CVE-2026-93781

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsiehlockdoor scsiehlockdoor is called from scsirestartoperations while the host is still in the SHOSTRECOVERY state, i.e. before the host is switched back to SHOSTRUNNING and...

CVE-2026-93268: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93269: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

PT-2026-97796

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description A deadlock condition exists that can be triggered by authenticated users. This issue is caused by a lock management bug within the user management module. A deadlock is a situation where...

CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93214

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock dependen...

Linux Distros Unpatched Vulnerability : CVE-2026-93781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: Do not block on tag allocation in scsiehlockdoor scsiehlockdoor is called from scsirestartoperations while the host is still in the SHOSTRECOVERY...

Linux Distros Unpatched Vulnerability : CVE-2026-93269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem...

Linux Distros Unpatched Vulnerability : CVE-2026-97483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: hcd: fix possible deadlock in rh control transfers From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS...

Linux Distros Unpatched Vulnerability : CVE-2026-93268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handl...

PT-2026-97956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular lock dependency exists in the ext4 ext migrate function. This occurs between s writepages rwsem and sb internal used for freeze protection, which can lead to a deadlock. The...

Security update for apptainer (critical)

openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21927-1 Rating: critical References: bsc1278666 bsc1279033 bsc1279236 bsc1279333 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-78662...

PT-2026-105237

Security vulnerability affects the helm-operator package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...