PT-2026-121954

In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for automounts correctly If mounts are propagated across user namespaces, attach recursive mnt locks every copy of the source mount to protect overmounts from vanishing and revealing the underlying...

PT-2026-121871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module regarding lease break and acknowledgment state handling. The system incorrectly skips valid lease states containing WRITE CACHING when breaking...

PT-2026-121976

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix stale pinned link entry when fb-pin performs the final unpin xe bo pin external and xe bo unpin external maintain the bo's pinned link list membership in xe-pinned.late.external, based on whether the current call is t...

PT-2026-121934

In the Linux kernel, the following vulnerability has been resolved: btrfs: free iov when btrfs uring read extent fails After btrfs uring read extent, the caller always jumped to out acct. That skips kfreedata-iov, which is only correct for -EIOCBQUEUED where the deferred path owns the iov. On...

PT-2026-122016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free write occurs in the memstick subsystem when wait for completion timeout expires in the memstick alloc card and memstick set rw addr functions. Because the subsystem...

Linux kernel Resource Control Compromise

The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources during its existence. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from improper marking of the RCU lock regions in netfilter ipset. When incrementing the uref counter, there is no need to maintain an RCU lock;...

PT-2026-121990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where concurrent listener setups for Broadcast Isochronous Streams BIS can lead to a slab-use-after-free. This occurs because iso sock...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It stems from a type confusion in the handling of device attributes for atiremote2 devices. The show and store callbacks for the channelmask and modemask attributes fail to update when these attributes are migrated; as a result, calls ...

PT-2026-122028

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverity info fsverity get info calls rhashtable lookup fast, which just uses rcu read lock and doesn't directly synchronize with fsverity remove info. For the same inode this isn't a...

PT-2026-122064

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SB FLAG DIRTY BITMAP flag set and the user activates the device in the 'R' mode, a crash in dm integrity resume happens becau...

PT-2026-121955

In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount Locked mounts are special. They protect the underlying files and directories from being revealed. do umount refuses to unmount locked mounts but shrink submounts doesn't. A shrinkable mount...

PT-2026-122062

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler A CPU going down has to empty its own rq. Its hotplug thread waits in sched cpu wait empty until nothing else is left, and the only thing that wake...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792751700)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792751700 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len =...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792750763)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792750763 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxequeuecleanup On error handling...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1792759740)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1792759740 advisory. - In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 6.6.79 up to 6.6.160, from 6.12.16 up to 6.12.113, from 5.15.179 up to 5.16, from 6.1.129 up to 6.2, and specifically in version 6.13. This vulnerability arises because PMTU traversal is not halted when the nexthop group contracts; as ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.6. It stems from an abnormal creation of FIB next hop exception FNHE when the kernel matches existing sockets for ICMP fragments that are locally delivered and referenced as UDP packets. This may allow off-chain attackers to bypass FNHE...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because pfcpsessionrecv fails to verify that a SEID is located within a linear region prior to reading it. When a short PFCP packet or session header resides within a fragment, this can lead to an out-of-bounds read of packet...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.1. It arises from the failure to properly halt V3D interrupt handling during runtime suspension; as a result, synchronizeirq cannot wait for interrupts on ARMCTRL that have not yet reached handlelevelirq. This allows vc4irq to execute afte...