CVE-2026-80938

A deadlock vulnerability was identified in the Linux kernel's mt7615 WiFi driver (mt76 subsystem). During suspend, mt7615_suspend() acquired the mt76 mutex before calling cancel_delayed_work_sync() on mac_work, while the worker itself acquires the same mutex—causing a deadlock if the work was alr...

EUVD-2026-76261

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

CVE-2026-80938

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

CVE-2026-80938 wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

PT-2026-96564

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check new map on session freed during unlock check new map iterates mdsc-sessions and for each active session drops mdsc-mutex to perform per-session operations. The forced-close path rank removed from map...

PT-2026-90370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ceph component of the Linux kernel within the check new map function. The function iterates through mdsc-sessions and releases mdsc-mutex to...

PT-2026-90256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the sunrpc component where the function create use gss proxy proc entry publishes the /proc/net/rpc/use-gss-proxy endpoint before the init gssp clnt function...

PT-2026-90201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lockd component where the nlm traverse files function pins the current file but fails to pin the saved next pointer across a mutex unlock for nlm inspect file. Thi...

PT-2026-96570

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp lock before publishing proc entry create use gss proxy proc entry publishes /proc/net/rpc/use-gss-proxy via proc create data before init gssp clnt runs mutex init on sn-gssp lock. Once the dentry is linked under...

CVE-2026-80967: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhrprobe requests pcxhrthreadedirq before initializing mgr-lock, even though the threaded handler takes that mutex. Initialize the manager locks before...

PT-2026-96462

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr probe requests pcxhr threaded irq before initializing mgr-lock, even though the threaded handler takes that mutex. Initialize the manager locks before request...

PT-2026-90448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the USB gadget functionfs module when a userspace daemon polls ep0 via a read operation while the gadget is asynchronously torn down via configfs. The issue arise...

PT-2026-90315

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the fbdev omapfb panel-dsi-cm component, the dsicm probe function registers the display before initializing the ddata-lock mutex. After omapdss register display publishes the display,...

CVE-2026-89508: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...

PT-2026-90068

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A deadlock occurs in the mt7615 wireless driver during the suspend process. The mt7615 suspend function acquires the mt76 mutex and subsequently calls cancel delayed work sync on mac work...

PT-2026-90097

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the ALSA pcxhr driver. The pcxhr probe function requests pcxhr threaded irq before initializing the mgr-lock mutex. Because the threaded handler utilizes this mute...

CVE-2026-80919 drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive wwmutex acquire in amdgpudevcoredumpformat When dumping IB contents from a hung job, amdgpudevcoredumpformat acquired the VM root PD's reservation via amdgpuvmlockbypasid and then, for each IB, called...

PT-2026-89089

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww mutex acquire in amdgpu devcoredump format When dumping IB contents from a hung job, amdgpu devcoredump format acquired the VM root PD's reservation via amdgpu vm lock by pasid and then, for each IB,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053155 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to...

CVE-2026-80819

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcommmutex for the deferred setup accept rfcommsockrecvmsg completes a deferred setup by calling rfcommdlcaccept without holding any RFCOMM lock: if testandclearbitRFCOMMDEFERSETUP, &d-flags...