PT-2026-94512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB server where ksmbd server init calls ksmbd proc init before creating other server subsystems. If a procfs or percpu counter allocation failure occurs, ksmbd pr...

CVE-2026-90186: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset makes the device use the global tagset, whose driverdata stays NULL. nullmapqueues therefore falls back to the module-wide...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the fact that the serialcoreaddoneport function allocates uport-ttygroups only after uartconfigureport. If this allocation fails, the console remains registered while the port is improperly released, potentially leading to null...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that when adding a new rdev to an existing RAID1 array with serializepolicy enabled, the conditions in mddevcreateserialpool skip the creation of rdev-serial. As a result, waitforserialization assumes that...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/mes component where a loop limit for hung queue db array was incorrectly set to only AMDGPU MAX MES PIPES iterations. On multi-XCC X-Complexity Cluster...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from NFSv4 passing a NULL parameter priv to nfs4deletelease during the competition between nfs4addlease and delegation reclamation. This allows for null pointer dereferencing in genericsetlease...

PT-2026-94534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where resizing submit queues or poll queues via configfs on a device with shared tags enabled can lead to a kernel crash. When a shared tag set is...

CVE-2026-93107: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state When docomplete finds the QP in the error state it returns RESPSTCHKRESOURCE. Before commit 49dc9c1f0c7e "RDMA/rxe: Cleanup reset state handling ...

PT-2026-94866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the teardown of Display Manager DM I2C adapters. Because these adapters may remain visible to userspace while the teardown process is active, a concurrent...

PT-2026-94903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rxe component where the responder state machine may reprocess a packet after the Queue Pair QP enters an error state. This occurs when do complete returns...

CVE-2026-90294: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isertputlogintx puts the final Login Response on the wire before transportregistersession, which iscsipostloginhandler reaches only after iscsitargetdologin...

PT-2026-94629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur during early runtime suspend in the snps-femto-v2 PHY driver. This happens because runtime Power Management PM callbacks may dereference the hsphy...

CVE-2026-90115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...

CVE-2026-90139: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fusefillsupersubmount fuseiget can return NULL when its inode allocation fails, but fusefillsupersubmount passed the result straight to getfuseinode and decremented fi-nlookup without checking i...

CVE-2026-90192: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: handle NULL data in senddata callback mailboxclearchannel calls mboxsendmessage with NULL data to notify the remote side that the RX channel has been cleared. qcomcpucpmboxsenddata blindly dereferenced the da...

CVE-2026-90164: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbdserverinit calls ksmbdprocinit before creating the remaining proc entries and server subsystems. ksmbdprocinit tears down partial state on a procfs or percpucounter...

CVE-2026-93093: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Publish channel state before callbacks Transport setup can enable callbacks before the setup routine returns. mailboxchansetup registers the mailbox client with mboxrequestchannel, and the mailbox controller...

PT-2026-94450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4/pnfs component where the nfs4 pnfs ds add function keys the per-net data server cache solely on the multipath address set, and the nfs4 pnfs ds structure doe...

PT-2026-94540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom cpucp mbox send data function when it is invoked via the mailbox clear channel function under PREEMPT RT. The issue arises because mailbox...