PT-2026-85723

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work nat keepalive work walks the state table while xfrm state walk holds net-xfrm.xfrm state lock. Its callback then acquires x-lock, which conflicts with the delete path taking the sa...

Linux Distros Unpatched Vulnerability : CVE-2026-78662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests,...

PT-2026-85737

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuse block alloc reads fch-initialized and then fch-io uring. fch-io uring is set before fch-initialized, ordered by the smp wmb in fuse chan set intialized, but fuse blo...

SUSE CVE-2026-80739

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

AZL-99030 CVE-2026-80739 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

UBUNTU-CVE-2026-80739

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739 net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739

CVE-2026-80739 affects the Linux kernel 's mlx5_core driver (Mellanox/NVIDIA network hardware), specifically the TC (Traffic Control) offload path in net/mlx5e. When __mlx5e_add_fdb_flow() fails for a peer flow , the cleanup path mlx5e_tc_del_flow() acquires the ESW devcom lock unconditionally wh...

EUVD-2026-70343

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739 net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

PT-2026-84937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An AA deadlock occurs in the Linux kernel when mlx5e add fdb flow fails in lower levels. The failure triggers the deletion of the flow via mlx5e tc del flow, which acquires the ESW devco...

PT-2026-90879

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5e add fdb flow fails in lower levels, the flow is deleted via mlx5e tc del flow, and mlx5e tc del flow is acquiring ESW devcom lock without condition. ...

CVE-2026-80739: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

The vulnerability of the `ovs_netdev_tunnelDestroy()` function in the `net/openvswitch/vport-netdev.c` module, which supports Open vSwitch routers in the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the ovsnetdevtunnelDestroy function in the net/openvswitch/vport-netdev.c module, which supports Open vSwitch routers in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failur...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500238)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500238 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39784513 CVE-2026-68480 - ocfs2: fix possible deadlock...

CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

DEBIAN-CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99156 CVE-2026-78662 affecting package cert-manager for versions less than 1.12.15-14

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...