PT-2026-89089

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww mutex acquire in amdgpu devcoredump format When dumping IB contents from a hung job, amdgpu devcoredump format acquired the VM root PD's reservation via amdgpu vm lock by pasid and then, for each IB,...

CVE-2026-80919: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive wwmutex acquire in amdgpudevcoredumpformat When dumping IB contents from a hung job, amdgpudevcoredumpformat acquired the VM root PD's reservation via amdgpuvmlockbypasid and then, for each IB, called...

OPENSUSE-SU-2026:21814-1 Security update for zk

This update for zk fixes the following issues: Changes in zk: - Update Go vendored dependencies to resolve security issues boo1278625, boo1278447: Upgrade golang.org/x/crypto to v0.56.0 to fix security vulnerabilities in the embedded x/crypto/ssh package: - CVE-2026-56854: authentication bypass -...

CLEANSTART-2026-XC26421 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the git-lfs package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053441 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfcworkerwakeup lpfcworkerwakeup calls the lpfcworkdo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053314 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgrlock smpcallfunctionsingle disables IRQ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053410 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053243 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fix missing NOWAIT check for ODIRECT start write When iouring starts a write, it'll...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053263 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dioendiowrite ocfs2unlink takes orphan dir...

SUSE CVE-2026-80845

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then acquires x-lock, which conflicts with the delete path taking the same loc...

SUSE CVE-2026-80859

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

SUSE CVE-2026-80879

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

CVE-2026-80879

CVE-2026-80879 affects the OCFS2 filesystem in the Linux kernel. The vulnerability is a circular locking dependency involving three system inode locks: INODE_ALLOC_SYSTEM_INODE , EXTENT_ALLOC_SYSTEM_INODE , and ORPHAN_DIR_SYSTEM_INODE . Specifically, ocfs2_dio_end_io_write() acquires EXTENT_ALLOC...

CVE-2026-80879 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

EUVD-2026-71509

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

CVE-2026-80879 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

CVE-2026-80845

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then acquires x-lock, which conflicts with the delete path taking the same loc...

CVE-2026-80859 fuse: fix missing barrier when checking io-uring readiness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

EUVD-2026-71309

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80859

CVE-2026-80859 affects the Linux kernel FUSE (Filesystem in Userspace) subsystem. The root cause is a missing read memory barrier (smp_rmb()) in fuse_block_alloc(). The function reads fch->initialized followed by fch->io_uring, but lacks the barrier needed to pair with the smp_wmb() in fuse...