CVE-2026-90013: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening options file The options files do not take the tracearray reference for the options they represent. This could cause a use-after-free kernel crash if one of these files is opened by...

CVE-2026-90039: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSDNETUP Writing to /proc/fs/nfsd/unlockfilesystem, or sending the NFSDCMDUNLOCKFILESYSTEM or NFSDCMDUNLOCKEXPORT netlink command, walks the NFSv4 client hash tables to revoke open...

PT-2026-93643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free bug exists in the ftrace component. When the trace instance files set ftrace filter and set ftrace notrace are opened, a race condition occurs where the system attempts ...

CVE-2026-89863: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qlachkedifrxsadeletepending obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. That command pointer can be NULL: the firmwar...

PT-2026-93504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the qla chk edif rx sa delete pending function. The function retrieves a SCSI command using GET CMD SPsp and accesses cmd-sc data direction without...

CVE-2026-89871: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails, data-kthreadvidcap is left holding this error pointer instead of being...

PT-2026-93512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the video-i2c media component where the kthread run function returns an ERR PTR an error pointer upon failure instead of NULL. When the start streaming function fails,...

CVE-2026-90025: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GETCURRENTCAM response after checking it is not 0xff. The port altmode array is...

PT-2026-93574

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs during the ACPI probe of the dps310 pressure sensor. When the device is enumerated via its ACPI HID IFX3100, the i2c client get device id function retur...

CVE-2026-89933: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

PT-2026-93666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The UCSI displayport driver contains an out-of-bounds OOB array index issue. The driver uses the response from a GET CURRENT CAM request to index the connector's port altmode array. Whil...

CVE-2026-89856: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha-msixcount is u16, but ha-maxreqqueues, ha-maxrspqueues and ha-maxqpairs are u8. Deriving the queue count as "ha-maxreqqueues = ha-msixcount - 1" therefore...

PT-2026-93497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where MSI-X derived queue counts are not properly clamped, leading to integer truncation. Specifically, ha-msix count is a u16 type, while ha-m...

PT-2026-93687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management subsystem where the use of spin trylock within a Non-Maskable Interrupt NMI on Uniprocessor UP systems is unsafe. This occurs specifically during...

Linux Distros Unpatched Vulnerability : CVE-2026-89933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL:...

Linux Distros Unpatched Vulnerability : CVE-2026-89990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: lock mutex in cephmdscheckaccess MDS session OPEN handling replaces mdsc-scapauths under mdsc-mutex, freeing the previous array and its strings...

Linux Distros Unpatched Vulnerability : CVE-2026-90002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Take tracearray reference before accessing its ftraceops The trace instance files setftracefilter and setftracenotrace was updated to work with specific...

Linux Distros Unpatched Vulnerability : CVE-2026-90013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Take tracearray reference when opening options file The options files do not take the tracearray reference for the options they represent. This could...

Linux Distros Unpatched Vulnerability : CVE-2026-90046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagealloc: don't spintrylock in NMI on UP Patch series mm/pagealloc: fixes for freepagesnolock on RT/UP. Pre-existing bugs found by Sashiko during review of...

Linux Distros Unpatched Vulnerability : CVE-2026-89856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha-msixcount is u16, but ha-maxreqqueues, ha-maxrspqueues and ha-maxqpairs are u8. Deriving...