CVE-2026-89721

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range maxregister The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. maxregister names 0x10000, one register past the end of...

CVE-2026-89571

In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctlcmdrpc copies cmd-inlen bytes into inbuf = kvzalloccmd-inlen and passes inbuf and inlen to -fwrpc. The CXL callback cxlctlfwrpc ignores inlen and never checks the...

EUVD-2026-76670

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...

CVE-2026-89721 phy: rockchip-samsung-dcphy: fix out-of-range max_register

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range maxregister The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. maxregister names 0x10000, one register past the end of...

CVE-2026-89684 nfsd: fix cpntf publish race in nfs4_init_cp_state

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4initcpstate nfs4allocinitcpntfstate published the new cpntf entry into the s2scpstateids IDR with cstype set in one s2scplock section, then took the lock again to listadd it onto pstid-sccplist...

CVE-2026-89679

A null pointer dereference in the Linux kernel's NFS server (nfsd) component affects nfsd4_setattr() when handling delegation timestamp attributes. If a client sends the NFSv4 "one stateid" (all-0xFF bytes) alongside FATTR4_WORD2_TIME_DELEG_ACCESS or FATTR4_WORD2_TIME_DELEG_MODIFY in a SETATTR re...

CVE-2026-89571

CVE-2026-89571 affects the Linux kernel 's CXL subsystem (cxl/features). The function fwctl_cmd_rpc() allocates a buffer of cmd->in_len bytes, but the CXL callback cxlctl_fw_rpc() ignores that length and never validates the user-controlled op_size against it. As a result, cxlctl_set_feature() ...

PT-2026-90287

In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl cmd rpc copies cmd-in len bytes into inbuf = kvzalloccmd-in len and passes inbuf and in len to -fw rpc. The CXL callback cxlctl fw rpc ignores in len and never...

PT-2026-90400

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4 init cp state nfs4 alloc init cpntf state published the new cpntf entry into the s2s cp stateids IDR with cs type set in one s2s cp lock section, then took the lock again to list add it onto p...

PT-2026-90437

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max register The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. max register names 0x10000, one register past the end o...

mt6985-CVE-2026-43499

CVE-2026-43499 失败记录：MT6985 适配尝试 结论 : 花了 68M tokens，没拿到 root。 原因 : KernelSnitch 时序攻击在 MTK Dimensity 9200 上不可靠，CONFIGPANICONOOPS=y 不给试错空间。 这篇文章记录了完整踩坑过程，供后人参考避坑。 背景...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...

Linux Distros Unpatched Vulnerability : CVE-2026-80853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053253 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uartdriverregistered on driver removal The removal of the last MAX3100...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053444 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA: Verify port when creating flow rule Validate port value provided by the user and with that...

AZL-99639 CVE-2026-80861 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhcigensetup locates the operational registers using the capability length read from the very first register: xhci-opregs = hcd-regs +...

CVE-2026-80861

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhcigensetup locates the operational registers using the capability length read from the very first register: xhci-opregs = hcd-regs +...

CVE-2026-80861 usb: xhci: bail out of setup if the controller is inaccessible

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhcigensetup locates the operational registers using the capability length read from the very first register: xhci-opregs = hcd-regs +...

EUVD-2026-71311

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhcigensetup locates the operational registers using the capability length read from the very first register: xhci-opregs = hcd-regs +...

CVE-2026-80861

CVE-2026-80861 is a vulnerability in the Linux kernel xHCI USB host controller driver (specifically the xhci-pci-renesas path). The root cause is in xhci_gen_setup(): when a USB controller (e.g., Renesas uPD720201 ) is dead or has dropped off the bus, the capability register read returns all-ones...