EUVD-2026-76306

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smcswitchconns smcswitchconns takes a reference on the SMC socket before dropping lgr-connslock, so the connection stays alive while the CDC slot is fetched: sockhold&smc-sk;...

CVE-2026-80983 net/smc: fix socket refcount leak in smc_switch_conns()

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smcswitchconns smcswitchconns takes a reference on the SMC socket before dropping lgr-connslock, so the connection stays alive while the CDC slot is fetched: sockhold&smc-sk;...

PT-2026-90260

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Four coupled defects in the gssx XDR option-array decoder create unsafe error paths. These issues include a NULL dereference in the caller, a reference count leak on the decoded group...

CVE-2026-80983: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smcswitchconns smcswitchconns takes a reference on the SMC socket before dropping lgr-connslock, so the connection stays alive while the CDC slot is fetched: sockhold&smc-sk;...

PT-2026-90451

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB gadget midi2 component. The f midi2 alloc inst function creates default configfs child groups for the default endpoint and default block using configfs ad...

CVE-2026-89688: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a reference on the nfs4stid sccount but takes no reference on the stateowne...

PT-2026-96526

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx dec option array error path bugs Four coupled defects in the gssx XDR option-array decoder make the error paths unsafe: a NULL deref in the caller, a refcount leak on the decoded group info, and a latent...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107319 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ...

PT-2026-90404

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the NFSv4 server. In the nfs4 preprocess seqid op function, the stateid is obtained via nfsd4 lookup stateid, which increments the sc count reference on the nf...

PT-2026-90471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the migrate device pages function where the folio mapping is read before calling folio free swap. If folio free swap succeeds, the folio is removed from the swap cache...

PT-2026-96443

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl used against rl count in refcount block validator ocfs2 find refcount rec in rl walks the on-disk refcount record array with: for ; i rf records.rl used; i++ rec = &rb-rf records.rl recsi; ... rl recs lives in ...

PT-2026-90209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 component of the Linux kernel where the ocfs2 validate refcount block function fails to validate the rl used and rl count variables against the actual on-dis...

CVE-2026-89544: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssxdecoptionarray error path bugs Four coupled defects in the gssx XDR option-array decoder make the error paths unsafe: a NULL deref in the caller, a refcount leak on the decoded groupinfo, and a latent use-after-fr...

PT-2026-90113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A socket reference count leak exists in the smc switch conns function. The issue occurs when the function takes a reference on the SMC socket but fails to call the corresponding sock put...

MiracleLinux 9 : kernel-5.14.0-687.31.1.el9_8 (AXSA:2026-1793:76)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1793:76 advisory. kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop...

kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove

A flaw was found in the Linux kernel's qrtr network subsystem. A race condition exists in the qrtrportremove function where the socket reference count is decremented prematurely. This allows a concurrent reader to access a socket whose reference count has dropped to zero, potentially leading to a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053251 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to...

Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-085343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085343 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svcxprtput on rpccreate failure On error situation...

CVE-2026-80897 netfs: release readahead folios on iterator preparation failure

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

AZL-99678 CVE-2026-80808 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...