CVE-2026-74523

A flaw was found in the Linux kernel's qede network driver. When a qede Network Interface Card NIC with VXLAN/GENEVE tunnel ports experiences a transmit TX timeout, a deadlock can occur in the driver's recovery process. This deadlock prevents the system's networking control plane from responding,...

CVE-2026-74463

A flaw was found in the Linux kernel's i2c: jz4780 driver. A severe deadlock can occur between the Common Clock Framework CCF and the I2C adapter lock. This happens when an I2C-controlled clock generator client is registered or modified, and a concurrent I2C transfer attempts to acquire a lock...

CVE-2026-74572

A flaw was found in the Linux kernel's btrfs zoned filesystem. A local user could trigger a deadlock when metadata writeback and transaction commit operations occur simultaneously. This deadlock causes the system to hang, leading to a Denial of Service DoS...

CVE-2026-74574

A flaw was found in the Linux kernel's dmaengine IDXD subsystem. A race condition during file-device setup failure cleanup in the idxdcdevopen function could lead to a deadlock, causing a denial of service. Furthermore, incorrect cleanup paths could result in operations on a freed memory context,...

CVE-2026-74526

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the mpi3mrfaultueventemit function is called from fault watchdog or reset paths, memory allocation requests can trigger a reclaim process. This reclaim process may then wait on host I/O that is already blocked, leading to a system...

CVE-2026-74535

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. This vulnerability arises from a race condition where the isosocktimeout function can execute concurrently with isoconndel, leading to a Use-After-Free UAF condition. A UAF vulnerability allows an attacker to potentially execute...

CVE-2026-74337

A flaw was found in the Linux kernel, specifically within the BPF Berkeley Packet Filter subsystem. This vulnerability allows NMI Non-Maskable Interrupt and tracepoint BPF programs to re-enter certain internal locks, known as LRU Least Recently Used locks, while they are already held. This re-ent...

CVE-2026-74318

A flaw was found in the Linux kernel's btrfs filesystem. A local user could trigger a deadlock when cloning an inline extent with the flushoncommit mount option, specifically when the destination offset is greater than zero. This issue occurs due to a missing isize update during the copy operatio...

CVE-2026-74354

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker could exploit a locking issue within the zappages function. This vulnerability arises because zapvmarange requires a specific memory map lock mmaplock that, when acquired under certain conditions, can le...

CVE-2026-74437

A flaw was found in the Linux kernel's uvcvideo module, which manages USB Video Class UVC devices. When a UVC camera with asynchronous control is in use, a specific sequence of operations can lead to a deadlock within the kernel. This vulnerability could allow a local attacker to cause a...

CVE-2026-74319

A flaw was found in the btrfs zoned filesystem within the Linux kernel. When performing data relocation, the system can enter a deadlock state. This happens because the relocation process waits for a space reservation ticket that cannot be fulfilled, as the relocation itself is the operation...

CVE-2026-74375

A flaw was found in the Linux kernel's RAID1 and RAID10 subsystems. When handling read errors, a specific sequence of operations involving cloned I/O requests and array suspension can lead to a deadlock. This can cause the system to become unresponsive, resulting in a Denial of Service DoS...

CVE-2026-72174

A flaw was found in the Linux kernel. A local attacker could trigger a self-deadlock condition within the huge pages hugetlb memory management subsystem. This occurs when a specific memory scan operation attempts to acquire a write lock while the same process already holds a read lock, causing th...

CVE-2026-74555

A flaw was found in the scsi: libsas component of the Linux kernel. A deadlock can occur during the system resume process, preventing the host from becoming fully operational. Additionally, a race condition can cause the controller to suspend prematurely while disks are still waking up. This can...

SUSE CVE-2026-68132

In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen via bdevfreeze dropping the last block layer freeze reference calls...

CVE-2026-72187

A flaw was found in the Linux kernel's NTFS file system driver. An attacker with local access could trigger a self-deadlock condition during inode eviction. This occurs when an attribute-list update during cluster allocation causes a temporary inode to lose its last reference, leading to an...

CVE-2026-72332

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local attacker could trigger a deadlock condition during power management resume operations. This occurs when a hardware context synchronization function attempts to acquire a lock that is already held, leading to a system...

CVE-2026-72203

A flaw was found in the Linux kernel. This flaw involves a deadlock condition within the NTFS file system's writeback mechanism. Specifically, an ABBA deadlock can occur between the extentlock and mreclock during inode and MFT Master File Table folio writeback operations. This could lead to a...

Linux Distros Unpatched Vulnerability : CVE-2026-74331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler...

Linux Distros Unpatched Vulnerability : CVE-2026-74437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: uvcvideo: Fix deadlock if uvcstatusstop is called from asyncctrl.work If a UVC camera has an asynchronous control, uvcstatusstop may be called from...