CLEANSTART-2026-EI39418 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the trust-manager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

CVE-2026-80919

CVE-2026-80919 affects the Linux kernel's drm/amdgpu driver, specifically the amdgpu_devcoredump_format() function. When dumping IB contents from a hung job, the function acquired the VM root PD's reservation via amdgpu_vm_lock_by_pasid() and then called amdgpu_bo_reserve() on each IB's backing b...

EUVD-2026-75094

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive wwmutex acquire in amdgpudevcoredumpformat When dumping IB contents from a hung job, amdgpudevcoredumpformat acquired the VM root PD's reservation via amdgpuvmlockbypasid and then, for each IB, called...

CVE-2026-36957

CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Server CVE ID: CVE-2026-36957 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The...

CVE-2026-78662

A flaw was found in golang.org/x/crypto/ssh. A malicious remote attacker could flood a channel's incoming requests before it is established, leading to a deadlock of the entire connection. This could result in a denial of service DoS for legitimate users. Mitigation Red Hat is not aware of a...

CVE-2026-56855

A flaw was found in golang.org/x/crypto/ssh. After a channel has been established, a remote malicious peer could send specially crafted messages. This could lead to a deadlock of the entire connection, resulting in a Denial of Service DoS for the affected system. Mitigation Red Hat is not aware o...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053243 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fix missing NOWAIT check for ODIRECT start write When iouring starts a write, it'll...

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 Privilege escalation research on CVE-2026-43499 rtmutex/futex-PI UAF, "GhostLock" targeting GOT-W29 HarmonyOS 4.0, kernel 4.19.157-perf+. Key findings : The vulnerability's write primitive was successfully verified on real hardware with KPM...

SUSE CVE-2026-80879

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

CVE-2026-80879

CVE-2026-80879 affects the OCFS2 filesystem in the Linux kernel. The vulnerability is a circular locking dependency involving three system inode locks: INODE_ALLOC_SYSTEM_INODE , EXTENT_ALLOC_SYSTEM_INODE , and ORPHAN_DIR_SYSTEM_INODE . Specifically, ocfs2_dio_end_io_write() acquires EXTENT_ALLOC...

EUVD-2026-71509

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

CVE-2026-80879 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

EUVD-2026-71309

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80859

CVE-2026-80859 affects the Linux kernel FUSE (Filesystem in Userspace) subsystem. The root cause is a missing read memory barrier (smp_rmb()) in fuse_block_alloc(). The function reads fch->initialized followed by fch->io_uring, but lacks the barrier needed to pair with the smp_wmb() in fuse...

CVE-2026-80845

CVE-2026-80845 affects the Linux kernel xfrm subsystem, specifically the NAT keepalive worker. The root cause is an AB-BA lock inversion : nat_keepalive_work() acquires x->lock while holding xfrm_state_lock, whereas the SA deletion path (xfrm_state_delete() / __xfrm_state_delete()) takes the s...

EUVD-2026-71295

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then acquires x-lock, which conflicts with the delete path taking the same loc...

CVE-2026-80845 xfrm: avoid lock inversion in nat keepalive work

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then acquires x-lock, which conflicts with the delete path taking the same loc...

EUVD-2026-71239

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a...

SUSE CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

SUSE CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...