USN-8917-1 linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

CVE-2026-90216

A flaw was found in the Linux kernel's Unsorted Block Images UBI subsystem. The ubiinitattach function, responsible for rolling back module initialization failures, incorrectly assumes that the parameter index matches the UBI device number. This can lead to a successfully attached device being...

CVE-2026-90211

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter component, specifically affecting the s390 architecture. When a read-modify-write atomic operation with BPFFETCH faults over an unmapped memory region, a register may not be properly cleared. This can lead to the program resuming...

CVE-2026-90209

A flaw was found in the Linux kernel's s390/debug component. A local user could trigger a deadlock by unregistering an s390dbf debug area while one of its associated debugfs files is being written to. This can lead to a system hang, resulting in a Denial of Service DoS...

CVE-2026-90190

A flaw was found in the nullblk module of the Linux kernel. A race condition occurs during initialization where a mutex is accessed before it is properly set up. A local attacker, by creating a directory in /sys/kernel/config/nullb/ at a specific time, could trigger this race condition. This coul...

CVE-2026-90186

A flaw was found in the Linux kernel's nullblk module. A local user can cause a system crash by attempting to resize device queues while a shared tag set is active. This improper handling of queue resizing leads to a null pointer dereference, which can result in a denial of service...

CVE-2026-90184

A flaw was found in the Linux kernel's nullblk module. A race condition exists where configfs attribute updates can occur concurrently with the nullblk device setup. This lack of synchronization can lead to incorrect device configuration, resulting in a system crash Denial of Service or failure t...

CVE-2026-90160

A flaw was found in the Linux kernel's Lightweight Tunnel BPF lwtbpf component. An attacker, by using a specially crafted BPF program, could cause an insufficient headroom condition after the program modifies the socket buffer skb head. This can lead to the kernel dropping network packets,...

CVE-2026-90147

A flaw was found in the Linux kernel's clock management subsystem. The devmclkgetoptionalenabledwithrate function registers its cleanup action prematurely, before successfully setting the clock rate. If the rate setting fails, the system attempts to disable and unprepare a clock that was never...

CVE-2026-90144

A flaw was found in the Linux kernel's dpll Digital Phase-Locked Loop subsystem. A race condition during device teardown, specifically when a dpll device unregisters while another driver still holds a pin, can lead to a NULL pointer dereference. This issue can cause a kernel crash, resulting in a...

CVE-2026-90220

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. An unprivileged local attacker can exploit this vulnerability by sending a specially crafted variable-length event to a non-existent port and then reading the bounced error event. This can lead...

CVE-2026-90217

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier, responsible for ensuring the safety of BPF programs, incorrectly compared iterator types during state pruning. This discrepancy between MEMRCU and PTRUNTRUSTED states could allow the verifier to prune an...

CVE-2026-90201

A flaw was found in the Linux kernel's pagepool networking component. A race condition can occur when the pagepooldestroy function runs concurrently with page return operations. This race condition can lead to a Use-After-Free UAF vulnerability, where the system attempts to access memory after it...

CVE-2026-90221

A flaw was found in the Linux kernel's Near Field Communication NFC NCI NFC Controller Interface component. A remote attacker could exploit this by injecting a specially crafted COREINITRSP packet. This malformed packet, which declares more supported radio frequency interfaces than it provides da...

CVE-2026-90214

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC Xilinx formatter Pulse-Code Modulation PCM driver. During the opening of an audio stream, memory allocated for stream data is not properly released if an error occurs in a subsequent step. This can...

CVE-2026-90212

A flaw was found in the Linux kernel's arm64 EFI Extensible Firmware Interface implementation. When software PAN Privileged Access Never is enabled, the system can experience a bad kernel memory access. This occurs due to incorrect handling of the TTBR0EL1 register during voluntary preemption...

CVE-2026-90205

A flaw was found in ocfs2 within the Linux kernel. OCFS2 trusts active orphan slot data read from disk inodes without proper validation. A corrupted inode could lead to an out-of-bounds memory access when processing orphan slots, potentially causing system instability or a denial of service...

CVE-2026-90200

A flaw was found in the Linux kernel's NTFS3 file system driver. An integer overflow vulnerability exists in the Multi-File Table MFT cluster validation logic. When processing a specially crafted boot sector, the driver fails to properly validate MFT cluster numbers due to an integer overflow...

CVE-2026-90208

A flaw was found in the Linux kernel's samsungpwm clock source driver. When the PREEMPTRT Preemptible Real-Time feature is enabled on ARM systems, a regular spinlock is incorrectly converted to a sleeping lock. This can lead to a deadlock or system instability, resulting in a Denial of Service Do...

CVE-2026-90165

A flaw was found in the Linux kernel's ksmbd server. This vulnerability occurs when the ksmbdstopdurablescavenger function attempts to stop a kernel thread that was not properly initialized, leading to an invalid pointer dereference. An attacker could potentially exploit this to cause a system...