PT-2026-122030

In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name tipc node find by name returns a node after dropping its RCU read lock without taking a reference. The LINK SET, LINK GET and LINK RESET STATS handlers then lock and access the...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792749577)

"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792749577 advisory. - In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid...

PT-2026-122004

In the Linux kernel, the following vulnerability has been resolved: net: team: stop reusing skb after queue override A nonzero dev queue xmit result does not return ownership of the skb. When an override port's qdisc drops it, the queue override helper used to try another port or the mode transmi...

PT-2026-121974

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: only accept doorbell BOs as queue doorbell amdgpu userq get doorbell index pins any BO passed as doorbell handle into the doorbell domain. For a regular BO, TTM moves it with ttm bo move null and its contents ar...

PT-2026-121881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dpaa2-switch component where the dpaa2 switch rx function incorrectly calls dpaa2 switch free fd during an error path to free a frame descriptor FD. The dpaa2 swit...

PT-2026-121858

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture where a kprobe hit occurring while another kprobe is in the KPROBE HIT SS state is incorrectly treated as unrecoverable. This situation can aris...

PT-2026-121910

In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to request irq With commit ba268514ea14 "rust: devres: fix race condition due to nesting", Devres::new returns Result by value instead of initializing in-place via PinInit. Because...

PT-2026-122054

In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are locally delivered and quote a UDP packet, a FIB nexthop exception FNHE is only created if the kernel c...

PT-2026-121901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the MACsec driver where the SecY is not initialized before the netdevice is registered. When creating a MACsec device with MAC offload over an LRO-capable lower device...

PT-2026-122052

In the Linux kernel, the following vulnerability has been resolved: rust binder: reschedule node refcount update on thread exit When a thread exits via BINDER THREAD EXIT, its pending work items are cancelled. If a thread exits while holding a pending node refcount increment e.g. pushed as deferr...

PT-2026-121962

In the Linux kernel, the following vulnerability has been resolved: namespace: check the mounts before reading their parents in pivot root path pivot root reads the parents of new root and of the caller's root and checks whether they are shared before it checks that either mount is in the caller'...

PT-2026-121917

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID steam component during the teardown sequence. A narrow timing window allows callbacks to be scheduled during cleanup, resulting in a dangling pointer to the free...

PT-2026-121906

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: use skb get hash net in seg6 make flowlabel Since commit d58e468b1112 "flow dissector: implements flow dissector BPF hook" skb flow dissect needs a net pointer, either from skb-dev, skb-sk, or since commit 3cbf4ffba5ee...

PT-2026-121953

In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that a propagated copy is moved beneath attach recursive mnt transfers MNT LOCKED from the top mount to the mount that is moved beneath it with MOVE MOUNT BENEATH. This allows the owner of a us...

PT-2026-121844

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the mld component. The driver fails to properly handle scenarios where Wake-on-Wireless LAN WoWLAN is configured and the system attempts to...

PT-2026-121963

In the Linux kernel, the following vulnerability has been resolved: namespace: remove the fsnotify marks of a mount namespace in process context mnt ns release drops the last passive reference of a mount namespace and removes its fanotify marks via fsnotify mntns delete. That takes the mutex of...

PT-2026-121937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ICE driver on arm64 architectures due to improper ordering of Memory-Mapped I/O MMIO writes for transmit doorbells. The driver uses the writel relaxed...

PT-2026-121946

In the Linux kernel, the following vulnerability has been resolved: net/sched: em text: reject unterminated algo before autoload This is a follow-up to commit 9c572a83037a "net/sched: fix potential stack infoleak in em text dump", which zero-initialised the dump-side struct. Sashiko pointed at a...

PT-2026-122025

In the Linux kernel, the following vulnerability has been resolved: gve: fix napi disable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napi disable and napi enable. However, the netdev lock has already been acquired before ndo bpf is...

PT-2026-122026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak exists in the Xilinx GPIO driver. The pm runtime get sync function increments the usage counter even upon failure. When xgpio request returns an error...