CVE-2026-93216 mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

kernel: mac802154: llsec: add skb_cow_data() before in-place crypto

A flaw was found in the Linux kernel's mac802154 IEEE 802.15.4 MAC security component. This vulnerability allows for data corruption and potential kernel crashes when cryptographic transformations are performed on shared network packet data without proper isolation. A remote attacker could exploi...

CVE-2026-93216

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

CVE-2026-97416: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfsmayallocdatachunk BUG Running btrfs balance can trigger a null-ptr-deref before relocating a data chunk when metadata corruption leaves a chunk in the chunk tree without a...

PT-2026-104859

In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs may alloc data chunk BUG Running btrfs balance can trigger a null-ptr-deref before relocating a data chunk when metadata corruption leaves a chunk in the chunk tree without...

CVE-2026-97502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host-data in IRQ handler mmcdavinciirq returns early only when both host-cmd and host-data are NULL: if host-cmd == NULL && host-data == NULL ... return IRQNONE; So we may legitimately reach the...

CVE-2026-93259: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a caller-saved register 0. Both calldoirq and calldosoftirq use inline...

CVE-2026-93216: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

CVE-2026-93256

In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: mask DAIF before restoring hibernated kernel The arm64 hibernate code manages the exception masking in an unsound way, leading to potential crashes and/or warnings during resume. When a hibernation image is save...

CVE-2026-93259

In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a caller-saved register 0. Both calldoirq and calldosoftirq use inline...

Linux Distros Unpatched Vulnerability : CVE-2026-93270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the...

PT-2026-97883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU issue exists in the print page owner memcg function. The function initially reads page-memcg data using READ ONCE to protect against NULL data and...

PT-2026-97946

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In CONFIG PPC KERNEL PCREL mode, the r2 register is available as a caller-saved register. The functions call do irq and call do softirq use inline assembly to call functions with stack...

PT-2026-98121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the mmc davinci irq function within the Linux kernel. The issue occurs because the function only returns early when both host-cmd and host-data are...

CVE-2026-93245

In the Linux kernel, the following vulnerability has been resolved: apparmor: policyint make sure list heads are initialized before fail path If profile create fails before policyinit is complete the list heads are not properly initialized causing profilefree sanity checks to trigger the followin...

CVE-2026-97502

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host-data in IRQ handler mmcdavinciirq returns early only when both host-cmd and host-data are NULL: if host-cmd == NULL && host-data == NULL ... return IRQNONE; So we may legitimately reach the...

Linux Distros Unpatched Vulnerability : CVE-2026-93259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a...

Linux Distros Unpatched Vulnerability : CVE-2026-97487

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: handle setblocksize failures jfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset =...

CVE-2026-93072

A flaw was found in the Linux kernel's irqchip/renesas-irqc driver. When the driver is removed, generic interrupt chips are not properly freed, leading to a resource leak. This can result in a use-after-free vulnerability, where a local attacker could potentially trigger a kernel crash...

SUSE CVE-2026-93072

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove The driver allocates domain generic chips probe. However, on driver removal, the generic chips are not automatically freed when the interrupt domain is removed becau...