PT-2026-93375

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.12.0 through 1.26.0 Description A use-after-free issue occurs when the software is compiled for DNS-over-HTTPs DoH support using the --with-libnghttp2 flag. During failure code paths, such as an RPZ drop query or...

PT-2026-93494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the qla2xxx SCSI driver. The function qla2x00 free fce trace frees and clears the ha-fce variable while holding only the fce mutex. However, the...

CVE-2026-89853: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump qla2x00freefcetrace freed and cleared ha-fce while holding only fcemutex. The firmware-dump consumers qla27xxfwdtentryt264 and qla25xxcopyfce read ha-fce NULL check...

ROS-20260916-73-0073

The vulnerability of the bondmain.c component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-93370

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.22.0 through 1.26.1 Description A use-after-free issue occurs when the software is compiled for DNS-over-QUIC DoQ support using the --with-libngtcp2 flag. In this configuration, each DoQ stream utilizes an output...

PT-2026-93679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the nfsd4 revoke export states function. The function drops the nn-client lock during the execution of revoke one stid and the subsequent read of clp-cl...

CVE-2026-90038: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during export state revocation nfsd4revokeexportstates has the same use-after-free as nfsd4revokestates: it drops nn-clientlock across revokeonestid and the following read of clp-clminorversion...

CVE-2026-82720: Use After Free

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

ALSA-2026:68235 Important: libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2026-89875: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

PT-2026-93655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash can occur in the tracing subsystem. The files show event filters and show event triggers do not take a reference to the trace array they are displaying...

PT-2026-93394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the smb2 tree connect function within the ksmbd module. The ksmbd tree conn connect function publishes a new tree connection in sess-tree conns with a...

CVE-2026-90005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damonstart failure Patch series "samples/damon: handle damonstart,stop failures". All DAMON sample modules are not correctly handling failures from damonstart. Among those, mtier also has an additional...

PT-2026-93646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description DAMON sample modules do not correctly handle failures from the damon start function. Specifically, the damon sample wsse start function fails to clean up resources when damon start fails...

PT-2026-93381

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.17 through 6.18.50 Linux kernel versions 7.0 through 7.2.4 Description A flaw in the Linux kernel's KVM virtualization code for ARM64 processors can allow a guest virtual machine to escape to the host system. The issue...

PT-2026-93597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locking issue exists in the s390/vfio-ap component when accessing the matrix dev-mdev list of ap matrix mdev objects. The vfio ap mdev probe function and the vfio ap mdev for queue...

PT-2026-93643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free bug exists in the ftrace component. When the trace instance files set ftrace filter and set ftrace notrace are opened, a race condition occurs where the system attempts ...

PT-2026-93654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free condition exists in the tracing component. This occurs because options files do not take a trace array reference for the options they represent. If one task opens one of...

PT-2026-93678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the NFSD component. An nfs4 openowner remaining on nn-close lru after a final CLOSE operation retains a raw pointer to its nfs4 client. When the laundrom...

CVE-2026-90001: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in structops destroy path hidbpfopsdestroydevice and hidbpfunreg can race on the same registration reference, double-putting struct hiddevice and freeing it while hiddestroydevice stil...