CVE-2026-93205: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

PT-2026-98019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI mediatek component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent...

CVE-2026-93206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

ROS-20260924-73-0036

The vulnerability of the iomapwritedelallocscan function in the fs/iomap/buffered-io.c file of the Linux kernel file system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2026-97487: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: jfs: handle setblocksize failures jfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...

CVE-2026-97484: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usbip: vhcihcd: fix NULL deref in statusshowvhci platformgetdrvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number exhaustion. statusshowvhci checked for a NULL pdev but not for a NULL hcd...

PT-2026-98124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI sysfs implementation where the resource resize store function allows writing to the resourceN resize sysfs attribute to change a Base Address Register BAR size...

PT-2026-98095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Reliable Datagram Sockets RDS implementation where the RDS INFO family of getsockopt2 options fails to filter information by the caller's network namespace. Becaus...

CVE-2026-97476: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rds: filter RDSINFO getsockopt by caller's netns The RDSINFO family of getsockopt2 options reads several file-scope global lists that are not per-netns: rdssockinfo / rds6sockinfo, rdssockincinfo / rds6sockincinfo - rdssocklist...

CVE-2026-93257: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: block: handle nogenerate/noverify properly in fs-integrity Check the BIPCHECK flags before generating or verifying PI information, otherwise this can be incorrectly called for non-PI metadata and cause generation of incorrect...

CVE-2026-93827

In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtiofssetupvqs allocates fs-vqs and fs-mqmap before calling virtiofindvqs. If virtiofindvqs fails, the error path frees both pointers and returns an error to virtiofsprobe...

CVE-2026-93254

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-93218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21910-1 Rating: important References: bsc1236344 bsc1240890 bsc1240957 bsc1249104 bsc1255225 bsc1255531 bsc1256629 bsc1256671 bsc1258278...

CVE-2026-93274: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

PT-2026-97879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the nfsd file net dispose function. During per-net teardown, the nn-nfsd serv pointer is cleared before the filecache laundrette is shut down. This...

PT-2026-97881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock exists in the usb gadget f tcm module within the usbg make tpg function. The issue occurs because usbg make tpg holds dep lock while calling configfs depend item unlocked, whi...

PT-2026-97886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the clocksource/drivers/timer-sun4i driver where the sun4i clkevt next event function incorrectly advertises TIMER SYNC TICKS as the min delta ticks. This allows the...

PT-2026-97887

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sched ext component where the kick sync wait bal cb function assumes it is executing on the runqueue's rq own CPU. Because the dispatch process can drop the rq loc...

PT-2026-97902

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs filesystem where extending a file size across an unaligned EOF End of File boundary—via operations such as truncate, fallocate, or write—may fail to properly...