PT-2026-121873

In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Add a channel shutdown field sashiko complained about possible teardown problem. The scenario CPU 0 CPU 1 imx mu isr imx mu shutdown imx mu xcr rmwpriv, IMX MU RCR, 0, IMX MU xCR RIEnpriv-dcfg-type, cp-idx; imx mu...

PT-2026-121928

In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod set value emits a WARN when the GPIO provider indicates that it can sleep, as is typical for I2C controlled GPIO expanders. Since the powerdown GPIO is only manipulated in proces...

Linux kernel Resource Control Compromise

The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources during its existence. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-122002

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink flow dump and panicked. ovs flow cmd dump calls ovs flow stats get f...

PT-2026-121971

In the Linux kernel, the following vulnerability has been resolved: statmount: read the parent of an unmounted mount under mount lock statmount mnt basic reads the ids of the parent through m-mnt parent with namespace sem held for reading. That's fine for a mount that is in a namespace. Everythin...

PT-2026-121955

In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount Locked mounts are special. They protect the underlying files and directories from being revealed. do umount refuses to unmount locked mounts but shrink submounts doesn't. A shrinkable mount...

PT-2026-122006

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: free the matchall entry on destroy sparx5 tc matchall replace allocates a struct sparx5 mall entry for every offloaded matchall filter and adds it to sparx5-mall entries. sparx5 tc matchall destroy removes the entry...

Linux Distros Unpatched Vulnerability : CVE-2026-99025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink...

Linux Distros Unpatched Vulnerability : CVE-2026-99041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6gre: remove obsolete ERSPAN PMTU update A tc tunnelkey action can attach a METADATAIPTUNNEL dst to an skb, and mirred can redirect it to a native ip6erspan...

Linux Distros Unpatched Vulnerability : CVE-2026-98978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: never expire a locked mount Locked mounts are special. They protect the underlying files and directories from being revealed. doumount refuses to...

PT-2026-121915

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not being guarded behind a lock...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from pvrvmgpuvaremap within drm/imagination failing to release GEM references obtained from split parts when remapping occurs. These split parts are then incorrectly linked to vmbo of a new object, resulting in reference leaks...

PT-2026-121977

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix shrinker accounting double-subtraction on nested external pins xe bo pin external and xe bo unpin external support nested pins, since the underlying ttm bo pin/ttm bo unpin maintain a pin count refcount rather than a...

PT-2026-122004

In the Linux kernel, the following vulnerability has been resolved: net: team: stop reusing skb after queue override A nonzero dev queue xmit result does not return ownership of the skb. When an override port's qdisc drops it, the queue override helper used to try another port or the mode transmi...

PT-2026-121924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PFCP Packet Forwarding Control Protocol implementation where pfcp encap recv fails to ensure that the 8-byte Session Endpoint Identifier SEID is in the linear area...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.55 and 7.2.9. This vulnerability stems from a default insufficient size of the kernel stack in 64-bit kernels, which may lead to a kernel stack overflow and trigger a kernel crash...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.13. It stems from the fact that btrfs fails to always return -EIOCBQUEUED after btrfsuringreadextentendio. When all bio operations are completed prior to btrfsencodedreadregularfillpages returning, a negative errno is returned. This result...

PT-2026-121934

In the Linux kernel, the following vulnerability has been resolved: btrfs: free iov when btrfs uring read extent fails After btrfs uring read extent, the caller always jumped to out acct. That skips kfreedata-iov, which is only correct for -EIOCBQUEUED where the deferred path owns the iov. On...

PT-2026-121995

In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIG SHADOW CALL STACK, handle exception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision wit...

PT-2026-121950

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Fix unlocked list del in drm bridge add When re-adding a bridge that was previously removed, drm bridge add drops it from bridge lingering list without holding bridge lock. Both bridge list and bridge lingering list a...