CLEANSTART-2026-KC15122 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the cert-manager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

CLEANSTART-2026-KK55331 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the dex package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

SUSE CVE-2026-46352

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protoc...

CLEANSTART-2026-FI63181 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the opa package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

SUSE CVE-2026-90158

In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...

SUSE CVE-2026-90193

In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: fix PREEMPTRT self-deadlock in IRQ handler qcomcpucpmboxirqfn calls mboxchanreceiveddata while holding chan-lock. Under PREEMPTRT, spinlockirqsave is converted to an rtspinlock rtmutex-based, which tracks...

SUSE CVE-2026-90265

In the Linux kernel, the following vulnerability has been resolved: btrfs: defrag: fix deadlock between defrag and delalloc space reservation While running fsstress with autodefrag and flushoncommit, hit a deadlock due to the fact that defrag reserves delalloc space while it's holding dirty and...

SUSE CVE-2026-90342

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock deadlock on arena lock failure Reported by the Sashiko AI review. arenavmfault returns VMFAULTRETRY when it can't take arena-spinlock, but it never took mmaplock. The fault path assumes a VMFAULTRETRY handler...

SUSE CVE-2026-92503

In the Linux kernel, the following vulnerability has been resolved: ext4: fix ABBA deadlock in ext4xattrinodecachefind Syzbot/stress-ng reported an ABBA deadlock in ext4 when exercising concurrent xattr workloads using the eainode mount/format option. The deadlock occurs between the running...

SUSE CVE-2026-93057

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context TX EQTR may run while devfreq gear scaling has quiesced the UFS tagset. In that context, functions ufshcdtxeqtr, ufshcdtxeqtr and ufsqcomgetrxfom allocate...

SUSE CVE-2026-93098

In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: fix deadlock in endpoint destroy during driver detach During driver detach, the device core holds the device mutex throughout the driver's remove callback chain. When the rpmsg endpoint is destroyed as part of that...

Linux Distros Unpatched Vulnerability : CVE-2026-90342

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix mmaplock deadlock on arena lock failure Reported by the Sashiko AI review. arenavmfault returns VMFAULTRETRY when it can't take arena-spinlock, but it...

Linux Distros Unpatched Vulnerability : CVE-2026-90209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/debug: Fix deadlock during unregister Unregistering an s390dbf debug area while one of the associated debugfs files is being written to can cause a deadloc...

Linux Distros Unpatched Vulnerability : CVE-2026-90310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized...

Linux Distros Unpatched Vulnerability : CVE-2026-90179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix deadlock in complain-mode changehat The use of changehat when in complain mode can cause a deadlock when the hat doesn't exist and a new learning...

Linux Distros Unpatched Vulnerability : CVE-2026-90095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: Fix the condition to enable over-io-uring The existing condition in fuseuringcmd is there only to avoid disabling io-uring for connections that already ru...

Linux Distros Unpatched Vulnerability : CVE-2026-90193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mailbox: qcom-cpucp: fix PREEMPTRT self-deadlock in IRQ handler qcomcpucpmboxirqfn calls mboxchanreceiveddata while holding chan-lock. Under PREEMPTRT,...

Linux Distros Unpatched Vulnerability : CVE-2026-90158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 tty: ttyio: use consolelistlock for list synchronization showconsactive calls the...

Linux Distros Unpatched Vulnerability : CVE-2026-93057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context TX EQTR may run...

Linux Distros Unpatched Vulnerability : CVE-2026-90238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: fix self-deadlock in isp4sdpwronandinit error path isp4sdpwronandinit hold...