Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from pvrvmgpuvaremap within drm/imagination failing to release GEM references obtained from split parts when remapping occurs. These split parts are then incorrectly linked to vmbo of a new object, resulting in reference leaks...

PT-2026-121872

In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm seq can look smaller than old, so .. covert to wrap-safe calculate way...

PT-2026-121849

In the Linux kernel, the following vulnerability has been resolved: isofs: handle set blocksize failures isofs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-121869

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component regarding the improper marking of RCU Read-Copy-Update locked areas. Specifically, the RCU lock is unnecessarily held when incrementing t...

PT-2026-121895

In the Linux kernel, the following vulnerability has been resolved: arm64: io: Reject non-user protection in ioremap prot Mapping a stack-top page via /dev/mem with PROT NONE and then reading that process's /proc//cmdline triggers a spurious WARN in ioremap prot through generic access phys:...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because lan966xfdmareload fails to restore rx-pageorder and rx-maxmtu upon failure to reload, as well as fails to restore the old page pool registration for XDP RXQs on each...

PT-2026-121901

In the Linux kernel, the following vulnerability has been resolved: macsec: initialize SecY before registering the netdevice Creating a MACsec device with MAC offload over an LRO-capable lower device triggers a warning in rtmsg ifinfo build skb when IPv4 forwarding is enabled by default. register...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises when the hot work queue remains initialized despite being disabled via the amdgpu.dpm=0 module parameter; this can lead to system anomalies or...

PT-2026-121848

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Immediately exec priority drop following activate With GICv5 an interrupt of equal or lower priority cannot be signalled until there has been a priority drop. This is done via the GIC CDEOI system instruction. Onc...

PT-2026-121858

In the Linux kernel, the following vulnerability has been resolved: arm64: kprobes: Allow reentering kprobes while single-stepping A kprobe can be hit while another kprobe is in KPROBE HIT SS state. This can happen when tracing or perf code runs from the debug exception path while the first kprob...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the system fails to detect the status of file extension attributes during the early stages of reading a read-only file system; as a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises from a planned scan that constructs probe requests prior to length validation; it may result in the copying of excessively large information elements into...

PT-2026-121880

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy to user failure If kfd dbg trap enable fails while copying runtime info to userspace, it had already activated the trap, set debug trap enabled, taken an extra process reference, and...

PT-2026-121897

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copied seq double-counting When a BPF stream verdict program redirects an skb back to the same socket self-redirect with BPF F INGRESS, sk psock verdict apply calls tcp eat skb which advances tcp...

PT-2026-121932

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't stash io uring encoded data across -EAGAIN Returning -EAGAIN while leaving btrfs uring encoded data in the cmd PDU leaks if the request is cancelled or the ring exits before reissue. io uring does not free driver PDU...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792762308)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792762308 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for...

PT-2026-121867

In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci-m lock while waiting for a lease break ack When a cifs.ko client caches a read-handle RH lease via deferred close and a conflicting open arrives, ksmbd breaks the lease and waits for the acknowledgment in wai...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.55 and 7.2.9. This vulnerability stems from a default insufficient size of the kernel stack in 64-bit kernels, which may lead to a kernel stack overflow and trigger a kernel crash...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.143, from 6.12.93 up to 6.12.112, from 6.18.17 up to 6.18.55, from 6.19.7 up to 6.20, and version 7.0. This vulnerability arises because ioremapprot on ARM64 architecture fails to reject protection values lacking PTEUSER; as a...

PT-2026-121881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dpaa2-switch component where the dpaa2 switch rx function incorrectly calls dpaa2 switch free fd during an error path to free a frame descriptor FD. The dpaa2 swit...