Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 5.10.43 through 5.11, 5.12.10 through 5.13, and 5.13. This vulnerability arises when data allocation succeeds but metadata allocation fails; as a result, req-p2pdev is passed to pcip2pmemfreesgl for cleanup prior to assignment, potentially...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.10.270 up to and including 5.11, from 5.15.221 up to and including 5.16, from 6.1.188 up to and including 6.2, from 6.6.157 up to and including 6.6.160, from 6.12.109 up to and including 6.12.114, from 6.18.50 up to and including...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.20. It arises because bpfflowdissect fails to enforce hlen to U16MAX prior to clamping it when processing offsets returned by BPF programs. If hlen exceeds 65535, it is truncated to U16MAX, causing nhoff and thoff to be forced to zero. Thi...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from improper handling of response message consumption by the wireguard noise module after intermediate initialization; this results in a race condition that may lead to inconsistent handshake states or repeated session...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.18. It arises from the failure to hash dentrys prior to their detachment, resulting in a race condition between detachmounts and ddelete. This may expose the contents of hidden files mounted on the system...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.160, 6.12.113, 6.18.57, and 7.2.11. This vulnerability arises because a lock is not held when calling dmtablegetmodenewmap via doresume; concurrent ioctl operations on the same device may swap tables after dmswaptable but befor...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.3. It occurs when, after a disk is removed but still in use, evictinodes releases s inodelistlock and then re schedules it; this causes the same set of inodes to be scanned repeatedly from the beginning of sinodes without being reclaimed. ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.0.2 through 4.1. It arises because pathpivotroot fails to verify whether a mount is within the caller’s mount namespace prior to reading newroot and accessing its parent mount point; this may lead to use-after-free conditions...

PT-2026-121874

In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devm pm runtime enable sashiko complained about early usage of the device while probe isn't completed. This can be mitigated by delaying the pm runtime enable into the removal path instead doing it early. This...

PT-2026-121903

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddev get ecc engine takes the NAND ECC ENGINE TYPE NONE path and returns success while leaving nand-ecc.engine NULL. The...

PT-2026-121916

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID steam component where the code for unregistering a battery was omitted during a previous refactor if subsequent registration steps failed. This flaw allows a...

PT-2026-121920

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum flower: Fix port range register leak in tmplt create mlxsw sp flower tmplt create parses a flow cls offload template into a stack-local struct mlxsw sp acl rule info purely to compute rulei.values.elusage. Parsing...

PT-2026-121926

In the Linux kernel, the following vulnerability has been resolved: net: always dissect GSO packets in virtio net hdr to skb Commit 9e8db5913264 "net: avoid false positives in untrusted gso validation" added a '&& skb-network header' check before flow-dissecting GSO packets without VIRTIO NET HDR...

PT-2026-121938

In the Linux kernel, the following vulnerability has been resolved: bonding: fix the program leak when XDP is replaced We need to release the reference on the old BPF prog, whether we are going to no-prog, or replacing the prog with another. Spotted by AI while running tests for the propagation...

PT-2026-121961

In the Linux kernel, the following vulnerability has been resolved: dcache: don't put a mountpoint on a dentry that's being removed rmdir, unlink and rename call dont mount on the victim and then detach mounts with the victim's inode locked. do lock mount takes the inode lock of the mountpoint an...

PT-2026-121966

In the Linux kernel, the following vulnerability has been resolved: namespace: check a recursive bind mount for mount namespace loops do loopback refuses to bind mount the file of a mount namespace that is as old as the caller's or older because a mount namespace that holds a mount of its own fil...

PT-2026-121970

In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT UMOUNT in clone mnt MNT UMOUNT gets raised on a mount that umount tree or umount one has taken out of its namespace. It's never cleared. detach mounts unhooks a mount that carries it instead of...

PT-2026-121987

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: free the skb when the DLC has no owner rfcomm recv data hands the skb to d-data ready and returns 0 without freeing it, so the callback owns the skb from that point on. The tty implementation frees it when the...

PT-2026-122002

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink flow dump and panicked. ovs flow cmd dump calls ovs flow stats get f...

PT-2026-122008

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br multicast sg del exclude ports removes automatically added STAR EXCL port groups by calling br multicast del pg. For S,G entries, that deletion calls back into br multicast s...