CVE-2026-31516 xfrm: prevent policy_hthresh.work from racing with netns teardown

In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policyhthresh.work from racing with netns teardown A XFRMMSGNEWSPDINFO request can queue the per-net work item policyhthresh.work onto the system workqueue. The queued callback, xfrmhashrebuild, retrieves the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992984 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flushworkqueue to prevent uaf Our detector found a concurrent use-after-free bug wh...

CVE-2023-54235

CVE-2023-54235 affects the Linux kernel and describes a race in the PCI/DOE path where destroy_work_on_stack() could race with the PCI DOE worker’s work_struct going out of scope. The issue manifested as a debug object dump and warning in the DoE workqueue (pci 0000:36:00.0 DOE). The recommended ...

Linux Distros Unpatched Vulnerability : CVE-2022-49968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition...

PT-2025-20353

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc1-syzkaller-00246-g900241a5cc15 Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the tipc mon reinit self function. This issue arises due to a racing...

kernel: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

A vulnerability was found in the Linux kernel's net rtl8xxxucore.c driver, where a race condition can lead to a use-after-free situation in the rtl8xxxustop function. This occurs when the workqueue is still running but the driver has been stopped and can lead to c2hcmdwork attempting to access...

SUSE CVE-2024-38634

In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock port-lock when calling uarthandlectschange uarthandlectschange has to be called with port lock taken, Since we run it in a separate work, the lock may not be taken at the time of running. Make sure that it's...

kernel: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

A vulnerability was found in the Linux kernel's net rtl8xxxucore.c driver, where a race condition can lead to a use-after-free situation in the rtl8xxxustop function. This occurs when the workqueue is still running but the driver has been stopped and can lead to c2hcmdwork attempting to access...