CVE-2026-93152 nvme-apple: Use acquire/release for queue enabled state

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

EUVD-2026-82260

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

CVE-2026-93152

CVE-2026-93152 is a memory ordering bug in the Linux kernel's nvme-apple driver. The function apple_nvme_init_queue() initializes queue state and then marks the queue as enabled using WRITE_ONCE(enabled, true) followed by wmb(). However, a wmb() does not guarantee that the earlier initialization ...

CVE-2026-93138 bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race in bpfgetbtfvmlinux bpfgetbtfvmlinux lazily parses the vmlinux BTF under the bpfverifierlock, but publishes the result through a plain store and re-checks it through a plain lockless load. Nothing...

EUVD-2026-82246

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race in bpfgetbtfvmlinux bpfgetbtfvmlinux lazily parses the vmlinux BTF under the bpfverifierlock, but publishes the result through a plain store and re-checks it through a plain lockless load. Nothing...

CVE-2026-93138

CVE-2026-93138 is a memory ordering race in the Linux kernel's BPF subsystem, specifically in bpf_get_btf_vmlinux(). The function lazily parses the vmlinux BTF under a mutex but publishes the resulting pointer via a plain store and reads it via a plain lockless load. On weakly-ordered architectur...

EUVD-2026-82162

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgqinited bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers call bcmvkdrvaccessok before accessing the message queues and their cached queue information...

CVE-2026-93052

This vulnerability affects the bcm-vk driver in the Linux kernel . The root cause is a memory ordering bug: atomic_set()/atomic_read() on the msgq_inited flag do not guarantee that writes to the message queue information are visible before the flag is observed as set. A reader calling bcm_vk_drv_...

CVE-2026-93052 misc: bcm-vk: Use acquire/release for msgq_inited

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgqinited bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers call bcmvkdrvaccessok before accessing the message queues and their cached queue information...

CVE-2026-93052: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgqinited bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers call bcmvkdrvaccessok before accessing the message queues and their cached queue information...

CVE-2026-93152: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

PT-2026-94948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-apple driver where the apple nvme init queue function initializes queue state and marks the queue as enabled. The interrupt and request paths check the enable...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Fixed the memory ordering between normal and ordered work functions. Ordered work functions are not guaranteed to be handled by the same thread that executes the normal work functions. The only way to synchronize...

Linux Distros Unpatched Vulnerability : CVE-2026-80895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page...

SUSE CVE-2026-80858

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

SUSE CVE-2026-80859

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

SUSE CVE-2026-80895

In the Linux kernel, the following vulnerability has been resolved: mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page mappings and then publishes the pointer into partition-ptvparray. Sever...

CVE-2026-80895

CVE-2026-80895 is a memory-ordering defect in the Linux kernel's mshv (Microsoft Hyper-V) hypervisor driver . The root cause is that mshv_partition_ioctl_create_vp() publishes a virtual-processor (VP) pointer into partition->pt_vp_array without an acquire/release barrier, while mshv_try_assert...

EUVD-2026-71645

In the Linux kernel, the following vulnerability has been resolved: mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page mappings and then publishes the pointer into partition-ptvparray. Sever...

CVE-2026-80895 mshv: Order pt_vp_array publish against irqfd assertion path

In the Linux kernel, the following vulnerability has been resolved: mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page mappings and then publishes the pointer into partition-ptvparray. Sever...