CVE-2026-99204

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debugstateprint walks reco.nodedata and formats their fields. The formatter holds dlm-spinlock, but the recovery...

CVE-2026-99204

The Linux kernel contains a use-after-free vulnerability within the ocfs2/dlm module. The issue occurs because debug_state_print() traverses and formats recovery participant records while holding dlm->spinlock, but these records are actually protected by dlm_reco_state_lock. This allows a conc...

CVE-2026-99204 ocfs2/dlm: Protect the recovery list during debugfs reads

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debugstateprint walks reco.nodedata and formats their fields. The formatter holds dlm-spinlock, but the recovery...

EUVD-2026-111956

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debugstateprint walks reco.nodedata and formats their fields. The formatter holds dlm-spinlock, but the recovery...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Reproduce Environment Note: The environment needs support KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

PT-2026-128197

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debug state print walks reco.node data and formats their fields. The formatter holds dlm-spinlock, but the recovery...

PT-2026-128143

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpu gpr amdgpu debugfs gpr read drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146276 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane check i...

SUSE CVE-2026-98663

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

SUSE CVE-2026-98666

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serialnumber file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does not wait for a read ...

CVE-2026-98703

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local privileged user can cause a Denial of Service DoS by writing an invalid index value to the fixed-rate debugfs debug filesystem interface. Due to missing input validation, the kernel uses the value to access data outside...

CVE-2026-98666

A flaw was found in the Linux kernel's Industrial I/O IIO adis16136 gyroscope driver. The driver fails to properly synchronize debugfs read operations during device unbinding, allowing an active read to continue after the underlying device data structures have been freed. A local user with access...

CVE-2026-98664

A flaw was found in the Linux kernel's ADIS16400 driver. A local user with access to the debug file system debugfs could cause a Denial of Service DoS or kernel memory corruption due to a use-after-free condition. This issue occurs because the driver creates its serial number debugfs file without...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142499 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown cephdestroyclient tears down the monitor...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142507 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane check i...

K000163828: Linux kernel vulnerability CVE-2026-46125

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the...

CVE-2026-98623

A flaw was found in the Linux kernel's Nouveau driver. A local user can trigger an out-of-bounds read by requesting an invalid clock performance state through the debugfs interface. This issue can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...

CVE-2026-92505

A flaw was found in the Linux kernel's iommu/amd component, specifically within the devidwrite debugfs function. When the foreachpcisegment loop fails to find a matching segment, a pointer can reference an invalid memory location. Accessing this invalid memory can lead to undefined behavior,...

CVE-2026-92477

A flaw was found in the Linux kernel, specifically within the scsi: ufs: debugfs component. The ufssavederrwrite function copies user-provided input into a stack buffer without ensuring sufficient space for a string terminator. If the input completely fills the buffer, it overwrites the terminato...