CVE-2026-93171 leds: lp5860: Fix a potential double-unlock

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

EUVD-2026-82279

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

CVE-2026-93131 platform/x86: dell-privacy: Fix race condition

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-privacy: Fix race condition Accessing priv-featurespresent needs to happen with the list mutex being held, otherwise priv can be freed at any moment...

CVE-2026-93131

CVE-2026-93131 affects the Linux kernel's platform/x86/dell-privacy driver . The vulnerability is a race condition caused by accessing priv->features_present without holding the list mutex, which allows the priv structure to be freed while still in use (use-after-free). The fix ensures the lis...

EUVD-2026-82239

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-privacy: Fix race condition Accessing priv-featurespresent needs to happen with the list mutex being held, otherwise priv can be freed at any moment...

CVE-2026-93098 rpmsg: glink: fix deadlock in endpoint destroy during driver detach

In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: fix deadlock in endpoint destroy during driver detach During driver detach, the device core holds the device mutex throughout the driver's remove callback chain. When the rpmsg endpoint is destroyed as part of that...

CVE-2026-93098

CVE-2026-93098 is a deadlock in the Linux kernel's rpmsg: glink subsystem. During driver detach, the device core holds the device mutex throughout the remove callback chain. When the GLINK endpoint destroy path redundantly unregisters the underlying rpmsg device, it calls device_del() , which att...

CVE-2026-93098 rpmsg: glink: fix deadlock in endpoint destroy during driver detach

In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: fix deadlock in endpoint destroy during driver detach During driver detach, the device core holds the device mutex throughout the driver's remove callback chain. When the rpmsg endpoint is destroyed as part of that...

CVE-2026-90098 net: sparx5: fix sleep in atomic context in MAC table access

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address calls sparx5mcsync / sparx5mcunsync - sparx5mactlearn /...

CVE-2026-90098 net: sparx5: fix sleep in atomic context in MAC table access

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address calls sparx5mcsync / sparx5mcunsync - sparx5mactlearn /...

CVE-2026-90098: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address calls sparx5mcsync / sparx5mcunsync - sparx5mactlearn /...

PT-2026-94446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sparx5 driver where the sparx5 set rx mode function operates while holding the netif addr lock bh lock. During this process, it calls sparx5 mc sync or sparx5 mc...

CVE-2026-93171: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

PT-2026-94633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the scsi qla2xxx driver, the qla2x00 sysfs read vpd function performs a redundant call to ha-isp ops-read optrom. This second call occurs after the optrom mutex has been released, whi...

PT-2026-94892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where Get or Set Feature payloads exceeding the mailbox payload size are split into multiple mailbox commands. Because the mbox mutex only serializes individual commands...

CVE-2026-89990

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in cephmdscheckaccess MDS session OPEN handling replaces mdsc-scapauths under mdsc-mutex, freeing the previous array and its strings. cephmdscheckaccess traverses this array without holding the mutex. A concurren...

DEBIAN-CVE-2026-89942

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix potential use-after-free in anonymous buffer release An anonymous buffer handle holds a reference to the underlying IIO device. The reference is dropped in the buffer handle's release function. If the device has...

EUVD-2026-80598

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in cephmdscheckaccess MDS session OPEN handling replaces mdsc-scapauths under mdsc-mutex, freeing the previous array and its strings. cephmdscheckaccess traverses this array without holding the mutex. A concurren...

CVE-2026-89990

This use-after-free vulnerability in the Linux kernel's Ceph filesystem driver occurs when ceph_mds_check_access() traverses the mdsc->s_cap_auths array without holding mdsc->mutex. A concurrent MDS session OPEN replaces and frees that array, so a racing file-open path (e.g. ceph_atomic_ope...

CVE-2026-89990 ceph: lock mutex in ceph_mds_check_access()

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in cephmdscheckaccess MDS session OPEN handling replaces mdsc-scapauths under mdsc-mutex, freeing the previous array and its strings. cephmdscheckaccess traverses this array without holding the mutex. A concurren...