USN-8922-1: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8922-1 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

CVE-2026-90323

A flaw was found in the Linux kernel's ublk subsystem. When the automatic buffer registration feature is active, an invalid buffer address can be processed, causing a command to complete while its associated tag remains active. This can lead to a system hang during resource teardown, allowing a...

CVE-2026-90311

A flaw was found in the Linux kernel's thermal subsystem. When a thermal zone device is removed, the associated hardware monitoring hwmon class device may not be properly detached if it contains attributes belonging to another thermal zone. This improper handling can prevent the thermal zone...

CVE-2026-90304

A flaw was found in the Linux kernel. When unhandled user faults are triggered, specifically by user programs executing the bkpt instruction with CONFIGPERFEVENTS=n disabled, the system attempts to send a signal with interrupts disabled. This can lead to system instability or a denial of service...

CVE-2026-90285

A flaw was found in the Linux kernel's scsi: qla2xxx component. A redundant read of the Vital Product Data VPD flash in the qla2x00sysfsreadvpd function occurs without the necessary locking mechanism. This exposes flash access to concurrent operations, which can lead to unpredictable behavior or...

CVE-2026-90280

A flaw was found in the Linux kernel's qcom qmp-usb physical layer PHY driver. A local attacker could trigger a null pointer dereference by re-enabling runtime power management via a sysfs attribute before the PHY is fully initialized. This can lead to a system crash, resulting in a Denial of...

CVE-2026-90275

A flaw was found in the Linux kernel's md/raid1 component. The raid1takeover function incorrectly sets a flag arrayfrozen that is not subsequently cleared. This issue can lead to a permanent stall of all input/output I/O operations to the RAID array, effectively causing a Denial of Service DoS fo...

CVE-2026-90266

A flaw was found in the Linux kernel's btrfs zoned filesystem. When metadata over-commitment occurs during a reclaim operation, the btrfsdelayedrefsrsvrefill function may return a transient error -EAGAIN. This error can cause the current transaction to abort, leading to the filesystem being force...

CVE-2026-90335

A flaw was found in the Linux kernel's handling of TTY devices. When a TTY device registration fails before a character device cdev is allocated, the serial core retains the port. Subsequent removal of this port can lead to a null-pointer dereference if cdevdel is called with a NULL cdev slot. Th...

CVE-2026-90320

A flaw was found in the Oracle Cluster File System 2 ocfs2 component of the Linux kernel. This vulnerability occurs due to insufficient validation of external extended attribute xattr entries when reading metadata. A local attacker could craft malicious xattr metadata, leading to a use-after-free...

CVE-2026-90332

A flaw was found in the Linux kernel's PCI dwc endpoint driver. This vulnerability occurs when the driver unmaps an Inbound Address Translation Unit iATU entry without ensuring that all pending Message Signaled Interrupts MSI writes have been flushed. This can lead to MSI writes being dropped or...

CVE-2026-90322

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 cluster heartbeat mechanism. When a local node within the cluster is reset, an internal flag is not properly cleared, leading to an inconsistent state. This inconsistency can cause the system's heartbeat monitoring process ...

CVE-2026-90317

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. In sleepable BPF programs, a use-after-free vulnerability can occur due to improper handling of RCU Read-Copy-Update protected pointers after a spin unlock operation. A local attacker with limited capabilities could...

CVE-2026-90319

A flaw was found in the Linux kernel's rapidio component. When the rioaddnet function fails, a pointer to a network object mport-net is not properly cleared, leaving it pointing to a memory area that has already been released. A subsequent operation to unregister the mport can then attempt to...

CVE-2026-90316

A flaw was found in the Linux kernel's drm/omap DSI Display Serial Interface driver. The driver incorrectly copied the Interrupt Service Routine ISR table, which could lead to a Use-After-Free UAF vulnerability. This occurs when stack-allocated objects are accessed after they have been deallocate...

CVE-2026-90314

A flaw was found in the Linux kernel's remoteproc component. This vulnerability allows a local attacker to trigger an out-of-bounds read by providing a specially crafted offset from firmware. The issue arises because a 32-bit unsigned integer offset is incorrectly handled as a signed integer,...

CVE-2026-90313

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup functionality. This issue arises during the replacement of a cgroup BPF program in multi-attach mode. If the replacement process fails, the system may not correctly restore the original program's storage pointers, leaving th...

CVE-2026-90312

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF. This vulnerability arises from an issue in how the BPF verifier processes certain memory load operations, specifically when a load-acquire instruction fetches into its own source register. This can lead to a type confusion, where...

CVE-2026-90309

A flaw was found in the Linux kernel's RDMA/erdma component. This vulnerability stems from improper management of Completion Queue CQ references during Event Queue EQ event processing. This can lead to a situation where a CQ is deallocated while still in use by an EQ handler, resulting in memory...