AZL-103787 CVE-2026-93243 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

UBUNTU-CVE-2026-93243

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

EUVD-2026-86249

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

CVE-2026-93243

The Linux kernel contains a vulnerability in secretmem where unevictable folios were not correctly accounted for under the RLIMIT_MEMLOCK limit. Because these folios remained unevictable even after being unmapped (relying on AS_UNEVICTABLE rather than PG_mlocked ) and were not included in a proce...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

PT-2026-97945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the make bad inode function is used within ocfs2 read inode block full. Because make bad inode resets the inode type to S IFREG, applying this t...

PT-2026-98097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the acrn virtual machine component. A race condition can occur between the acrn irqfd deassign function and the eventfd EPOLLHUP wakeup, leading to the...

CVE-2026-93243: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

PT-2026-97910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the secretmem component where locked pages are not properly accounted for. The system treats memory as if it were locked using mlock, which should be limited by the...

PT-2026-98010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double fput occurs during error handling within the cachefiles create tmpfile function. A double fput is a condition where the reference...

PT-2026-98043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-fc module where a controller in the CONNECTING state may experience an admin request timeout, triggering ctrl-ioerr work to abort inflight requests. This...

CVE-2026-90831

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the bfdelfstrtabdelref function. This could lead to unexpected behavior or system instability...

CVE-2026-89728

A flaw was found in the Linux kernel's I3C Renesas driver. When the I3C bus is empty and software initiates Dynamic Address Assignment DAA, an out-of-bounds access can occur. This is due to an incorrect calculation of the newly discovered devices bitmask, which can lead to system instability or...

CVE-2026-89731

A flaw was found in the Linux kernel. A vulnerability exists in the cxlrchgetaerinfo function, which is responsible for handling CXL/RAS Compute Express Link/Reliability, Availability, and Serviceability AER Advanced Error Reporting capabilities. Due to a mismatch between a software structure and...

CVE-2026-89764

A flaw was found in the Linux kernel's rust: devres component. A race condition exists when two processes attempt to revoke a Devres resource concurrently. This can lead to a use-after-free vulnerability, where one process might free resources that another process is still actively using. Such an...

CVE-2026-89455

A flaw was found in the Linux kernel's PCI PLDA driver. During the teardown of Interrupt Request IRQ domains, the system can attempt to access memory that has already been freed. This 'use-after-free' vulnerability occurs because the domain's internal data is released before all associated IRQs a...

CVE-2026-89687

A flaw was found in the Linux kernel's Network File System Daemon nfsd. The nfsdfiledoacquire function might attempt to use a file that has not been fully opened, as the -atomicopen operation could return success prematurely. While this scenario is considered highly improbable, it could lead to...

CVE-2026-80958

A flaw was found in the dm-pcache component of the Linux kernel. The tail-kset read operations, used by cachereplay, the writeback worker, and the garbage collection GC worker, incorrectly calculate the length of the data region. This error causes the system to read beyond the intended segment da...

CVE-2026-81006

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI component. During the registration of an IPMI system management interface, an error in the cleanup process can leave a system file sysfs attribute registered even after its associated memory has been released...