CVE-2026-89681

A flaw was found in the Linux kernel's nfsd component. A race condition in the layout fence worker can cause a double-reference to a layout stateid. This occurs because the workqueue core clears a pending flag prematurely, allowing a new worker to be scheduled while another is still active. The...

CVE-2026-80936

A flaw was found in the Linux kernel's mt7925 Wi-Fi driver. During multi-link power-save setup, the mlopmwork is queued with a delay but not properly cancelled when the device is stopped. This can lead to the work item attempting to access a deallocated workqueue, resulting in a kernel warning an...

CVE-2026-80936

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

EUVD-2026-76593

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...

CVE-2026-89681 nfsd: fix layout fence worker double-reference race

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...

CVE-2026-89681

This Linux kernel vulnerability affects the nfsd (NFS server) component, specifically the layout fence worker. The root cause is a race condition : the workqueue core clears WORK_STRUCT_PENDING before the callback is invoked, allowing delayed_work_pending() in lm_breaker_timedout() to return fals...

EUVD-2026-76371

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwrrdywork, maxchargingtimework and battpresencework. pwrrdywork and battpresencework can also queue maxchargingtimework, while...

CVE-2026-89465

A use-after-free vulnerability in the Linux kernel's rt9455 power supply driver (Richtek RT9455 charger/fuel-gauge IC). During rt9455_remove() or a probe error path, a race condition allowed batt_presence_work to re-queue max_charging_time_work after it had already been cancelled, and the IRQ cou...

CVE-2026-80947

A use-after-free in the Linux kernel's rtl8xxxu USB WiFi driver occurs when the rx_urb_wq workqueue worker runs after rtl8xxxu_disconnect() frees the private driver data (priv) via ieee80211_free_hw(). The root cause is that rtl8xxxu_stop() cancels sibling work items but never cancels rx_urb_wq, ...

CVE-2026-80936

CVE-2026-80936 affects the mt7925 Wi-Fi driver in the Linux kernel, covering both PCIe and USB variants. During multi-link power-save setup, the driver queues a deferred work item (mlo_pm_work) with a 5-second delay but never cancels it on the stop/teardown path . If the device is removed within ...

EUVD-2026-76259

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80936 wifi: mt76: mt7925: cancel mlo_pm_work on stop

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80932 vsock/virtio: flush works in dependency order

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

PT-2026-90066

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo pm work on stop mt7925 queues mlo pm work with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work...

PT-2026-90181

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr rdy work, max charging time work and batt presence work. pwr rdy work and batt presence work can also queue max charging time work...

PT-2026-90397

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK STRUCT PENDING before the callback is invoked, so delayed work pending in lm breaker timedout can return false while the fence worker is already...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053245 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. I...

SUSE CVE-2026-80885

In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix AFS to cancel its OOB message processing typically to respond to security challenges. Also move OOB message processing to afswq so that it's also waited for and make the OOB...

Linux Distros Unpatched Vulnerability : CVE-2026-80753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global...

Linux Distros Unpatched Vulnerability : CVE-2026-80780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: pidff: fix OOB write when hid-inputs is empty hidpidffinitwithquirks derives its inputdev from listentryhid-inputs.next, struct hidinput, list without firs...