CVE-2026-90222

A flaw was found in the Linux kernel's Near Field Communication NFC PN533 driver. A race condition can occur during frame transmission where a memory buffer is prematurely released while the I2C transport is still attempting to use it. This use-after-free vulnerability can lead to system...

USN-8918-1: Linux kernel (Azure) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8921-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8920-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...

USN-8920-1 linux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...

USN-8923-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; CVE-2022-49111, CVE-2022-49114...

USN-8923-1 linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; CVE-2022-49111, CVE-2022-49114...

USN-8919-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - iouring subsystem; -...

USN-8922-1: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8922-1 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

CVE-2026-90323

A flaw was found in the Linux kernel's ublk subsystem. When the automatic buffer registration feature is active, an invalid buffer address can be processed, causing a command to complete while its associated tag remains active. This can lead to a system hang during resource teardown, allowing a...

CVE-2026-90311

A flaw was found in the Linux kernel's thermal subsystem. When a thermal zone device is removed, the associated hardware monitoring hwmon class device may not be properly detached if it contains attributes belonging to another thermal zone. This improper handling can prevent the thermal zone...

CVE-2026-90304

A flaw was found in the Linux kernel. When unhandled user faults are triggered, specifically by user programs executing the bkpt instruction with CONFIGPERFEVENTS=n disabled, the system attempts to send a signal with interrupts disabled. This can lead to system instability or a denial of service...

CVE-2026-90285

A flaw was found in the Linux kernel's scsi: qla2xxx component. A redundant read of the Vital Product Data VPD flash in the qla2x00sysfsreadvpd function occurs without the necessary locking mechanism. This exposes flash access to concurrent operations, which can lead to unpredictable behavior or...

CVE-2026-90280

A flaw was found in the Linux kernel's qcom qmp-usb physical layer PHY driver. A local attacker could trigger a null pointer dereference by re-enabling runtime power management via a sysfs attribute before the PHY is fully initialized. This can lead to a system crash, resulting in a Denial of...

CVE-2026-90275

A flaw was found in the Linux kernel's md/raid1 component. The raid1takeover function incorrectly sets a flag arrayfrozen that is not subsequently cleared. This issue can lead to a permanent stall of all input/output I/O operations to the RAID array, effectively causing a Denial of Service DoS fo...

CVE-2026-90266

A flaw was found in the Linux kernel's btrfs zoned filesystem. When metadata over-commitment occurs during a reclaim operation, the btrfsdelayedrefsrsvrefill function may return a transient error -EAGAIN. This error can cause the current transaction to abort, leading to the filesystem being force...

CVE-2026-90335

A flaw was found in the Linux kernel's handling of TTY devices. When a TTY device registration fails before a character device cdev is allocated, the serial core retains the port. Subsequent removal of this port can lead to a null-pointer dereference if cdevdel is called with a NULL cdev slot. Th...

CVE-2026-90320

A flaw was found in the Oracle Cluster File System 2 ocfs2 component of the Linux kernel. This vulnerability occurs due to insufficient validation of external extended attribute xattr entries when reading metadata. A local attacker could craft malicious xattr metadata, leading to a use-after-free...

CVE-2026-90332

A flaw was found in the Linux kernel's PCI dwc endpoint driver. This vulnerability occurs when the driver unmaps an Inbound Address Translation Unit iATU entry without ensuring that all pending Message Signaled Interrupts MSI writes have been flushed. This can lead to MSI writes being dropped or...