CVE-2026-98109

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing hdev-advmonitorsidr and registering the MSFT extension via msftregister...

DEBIAN-CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

UBUNTU-CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98109 Bluetooth: hci_core: Fix race condition during device registration

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing hdev-advmonitorsidr and registering the MSFT extension via msftregister...

CVE-2026-98109 Bluetooth: hci_core: Fix race condition during device registration

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing hdev-advmonitorsidr and registering the MSFT extension via msftregister...

EUVD-2026-86940

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing hdev-advmonitorsidr and registering the MSFT extension via msftregister...

CVE-2026-98109

A race condition exists in the Linux kernel Bluetooth hci_core component during device registration. In the hci_register_dev() function, the power_on work item is queued to the request workqueue before the msft_register() extension and other device structures are fully initialized. For devices wi...

EUVD-2026-86653

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98000

The Linux kernel contains a potential Use-After-Free (UAF) vulnerability in the hwmon subsystem specifically within the pec_store() function. The issue occurs because the code uses guard(mutex)(&hwdev->lock) to manage a mutex. If a chip write operation returns an error other than -EOPNOTSUPP, ...

CVE-2026-98000 hwmon: Fix potential UAF in pec_store

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98000: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

Linux Distros Unpatched Vulnerability : CVE-2026-98000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than...

PT-2026-99006

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...

CVE-2026-98109

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix race condition during device registration In hciregisterdev, the poweron work item is queued to hdev-reqworkqueue before initializing hdev-advmonitorsidr and registering the MSFT extension via msftregister...

PT-2026-98771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during Bluetooth device registration. In the hci register dev function, the power-on work item is queued before the initialization of hdev-adv monitors idr and th...

PT-2026-98663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the pec store function. The problem occurs when a guardmutex&hwdev-lock is acquired and a chip write operation returns an error other than -EOPNOTSUP...

CVE-2026-97501

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction pinctrlgpiodirectioninput / pinctrlgpiodirectionoutput take the pinctrl mutex. This causes a gpiochip operations to need to sleep. Worse yet, the .cansleep...

DEBIAN-CVE-2026-97501

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction pinctrlgpiodirectioninput / pinctrlgpiodirectionoutput take the pinctrl mutex. This causes a gpiochip operations to need to sleep. Worse yet, the .cansleep...