Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260923-73-0074

The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which is part of the Linux kernel’s block-level support, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SUSE CVE-2026-90258

In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking and can allow userspace or another driver to reconfigure an active IR...

SUSE CVE-2026-93202

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

WordPress Secure Copy Content Protection and Content Locking plugin < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter vulnerability

Admin+ Stored XSS via ayssccpsubiconimage Parameter vulnerability discovered by Luca Jungnickel in WordPress Plugin Secure Copy Content Protection and Content Locking versions 5.1.5...

Linux Distros Unpatched Vulnerability : CVE-2026-90258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking...

Linux Distros Unpatched Vulnerability : CVE-2026-93202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, ...

AZL-101906 CVE-2026-93202 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

DEBIAN-CVE-2026-93202

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

DEBIAN-CVE-2026-90258

In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking and can allow userspace or another driver to reconfigure an active IR...

EUVD-2026-82310

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

CVE-2026-93202

CVE-2026-93202 is a deadlock vulnerability in the Linux kernel i3c master driver. The function i3c_master_register_new_i3c_devs() calls device_register() while holding i3c_bus_normaluse_lock() (a read-side rwsem). The resulting device probe callback may invoke I3C helpers that re-acquire the same...

CVE-2026-90258

This vulnerability affects the Linux kernel pinctrl airoha driver. The root cause is a missing .irq_request_resources callback, which prevents gpiolib from setting GPIOD_FLAG_USED_AS_IRQ. As a result, pin direction locking is broken, allowing userspace or another driver to reconfigure an active I...

PT-2026-94519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smbdirect component where smbdirect socket destroy releases pending or ready child sockets while still holding the listener's handler lock &id priv-handler mutex a...

CVE-2026-90258: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking and can allow userspace or another driver to reconfigure an active IR...

CVE-2026-93202: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500328)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500328 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035126 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft...

CVE-2026-92615: Improper Resource Locking

A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...