PT-2026-98701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the verifier incorrectly treats the return value of the bpf refcount acquire function as non-NULL for borrowed RCU kptrs. This occurs because...

PT-2026-98768

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/pagemap component where a device-private folio migrated to system memory via a CPU fault may remain reachable through the raw-PFN eviction path before migratio...

PT-2026-98762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the net/ipv6/mcast.c component, RCU-protected lists including np-ipv6 mc list, idev-mc list, and idev-mc tomb are updated using direct pointer assignments instead of the required rcu...

PT-2026-98764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 multicast implementation where the ip6 mc del1 src function improperly handles the removal of source filters. When a filter count reaches zero, the function...

PT-2026-98765

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the IGMP implementation when ip check mc rcu is called from RCU read-side critical sections, such as packet receive and route lookup fast paths including mkroute...

PT-2026-98763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 multicast implementation where the ip6 mc source function modifies psl-sl addr and psl-sl count in-place during the addition or removal of source filters...

PT-2026-98689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge multicast implementation where the br multicast del port group function unlists the port group without using the correct RCU helper to preserve the next...

CVE-2026-97971

In the Linux kernel, the following vulnerability has been resolved: nstree: check listing permission before taking a namespace reference legitimizens takes a reference on the candidate namespace before maylistns has decided whether the caller may see it. The freensput cleanup on the denied path c...

CVE-2026-97583

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

CVE-2026-98026

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: properly convert mglist to rcu Sashiko reported a bug 1 that brmulticastdelportgroup unlists the port group not using proper rcu helper that preserves the next pointer and after that immediately frees the port...

CVE-2026-97583: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

CVE-2026-98101

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and RAW multicast receive paths. ip6mcsource mutated psl-sladdr and...

CVE-2026-98038

In the Linux kernel, the following vulnerability has been resolved: bpf: Keep refcountacquire nullable for borrowed RCU kptrs bpfrefcountacquire is fallible for a borrowed reference because the object may have reached a zero refcount. The verifier therefore keeps KFRETNULL on the return value...

CVE-2026-97971: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nstree: check listing permission before taking a namespace reference legitimizens takes a reference on the candidate namespace before maylistns has decided whether the caller may see it. The freensput cleanup on the denied path c...

Linux Distros Unpatched Vulnerability : CVE-2026-98102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: fix RCU list diversion in ip6mcdel1src When removing a source filter whose count reaches zero, ip6mcdel1src unlinks psf from pmc-mcasources. If the...

Linux Distros Unpatched Vulnerability : CVE-2026-98038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Keep refcountacquire nullable for borrowed RCU kptrs bpfrefcountacquire is fallible for a borrowed reference because the object may have reached a zero...

Linux Distros Unpatched Vulnerability : CVE-2026-98106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CPU fault can remain reachable through the raw-PFN...

PT-2026-98635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nstree component where the legitimize ns function takes a reference to a candidate namespace before the may list ns function determines if the caller has permissio...

SUSE CVE-2026-93817

In the Linux kernel, the following vulnerability has been resolved: perf: Fix addrfilterranges lifetime Lee Jia Jie reported that since event::addrfilterranges is used under RCU, it should be RCU freed...

DEBIAN-CVE-2026-93817

In the Linux kernel, the following vulnerability has been resolved: perf: Fix addrfilterranges lifetime Lee Jia Jie reported that since event::addrfilterranges is used under RCU, it should be RCU freed...