PT-2026-94843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf arena free pages function where scalar arena addresses are processed by masking the address to the low 32 bits and reconstructing a full user address from the...

GO-2026-6453 Unbounded memory allocation via streaming row reader in github.com/xuri/excelize

In github.com/xuri/excelize/v2, the streaming worksheet reader used by Rows and GetRows does not enforce the maximum row limit TotalRows on row "r" attributes. A crafted spreadsheet with an out-of-bounds row index causes GetRows to allocate empty row slices up to the specified row number, leading...

CVE-2026-77410

RabbitMQ amqp091-go (a Go AMQP 0.9.1 client) is affected by a resource exhaustion vulnerability prior to v1.13.0 . The flaw resides in Channel.recvContent in channel.go, which preallocates the message body slice using the uint64 ch.header.Size value from the AMQP content header without capping it...

DEBIAN-CVE-2026-89877

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164devsetup adds the device to the global saa7164devlist before requesting the PCI BAR memory regions. If getresources fails, saa7164devsetup decrements the device...

CVE-2026-89877

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164devsetup adds the device to the global saa7164devlist before requesting the PCI BAR memory regions. If getresources fails, saa7164devsetup decrements the device...

DEBIAN-CVE-2026-89830

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In allocatedatablock, when allocating a new data block dn-datablkaddr == NULLADDR, incvalidblockcount is called first to increment totalvalidblockcount and iblocks...

CVE-2026-89805

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Fix folio allocation fallback and use-after-put drmpagemapmigratepopulaterampfn had two issues when populating RAM PFNs with higher-order folios: 1. The higher-order vmaallocfolio/folioalloc calls did not pass...

DEBIAN-CVE-2026-89805

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Fix folio allocation fallback and use-after-put drmpagemapmigratepopulaterampfn had two issues when populating RAM PFNs with higher-order folios: 1. The higher-order vmaallocfolio/folioalloc calls did not pass...

CVE-2026-89992

CVE-2026-89992 is a memory management flaw in the Linux kernel 's cpuidle driver, specifically in the dt_idle_genpd subsystem. The root cause is a use-after-free / invalid free : dt_idle_pd_alloc() calls kasprintf() to allocate the full device-tree node path, then sets pd->name to point at kba...

EUVD-2026-80594

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in allocpagesbulkweightedinterleave syzbot reported a sleeping function called from invalid context splat in buckettablealloc. When rhashtableinsertslow rehashes the table under rcureadlock, ...

CVE-2026-89986 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in allocpagesbulkweightedinterleave syzbot reported a sleeping function called from invalid context splat in buckettablealloc. When rhashtableinsertslow rehashes the table under rcureadlock, ...

CVE-2026-89986 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in allocpagesbulkweightedinterleave syzbot reported a sleeping function called from invalid context splat in buckettablealloc. When rhashtableinsertslow rehashes the table under rcureadlock, ...

CVE-2026-89986

CVE-2026-89986 is a Linux kernel vulnerability in the mm/mempolicy subsystem, specifically in alloc_pages_bulk_weighted_interleave(). The function hardcoded GFP_KERNEL when allocating a temporary weights array via kmalloc(), which can trigger a sleeping allocation in atomic or RCU read-side conte...

CVE-2026-89926 KVM: s390: Fix length check __import_wp_info()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix length check importwpinfo struct kvmhwbreakpoint::len is a u64 that is fully controlled by user space. This is then assigned to wpinfo-len, which is an int. The bounds check is done on the truncated value while the...

EUVD-2026-80526

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix length check importwpinfo struct kvmhwbreakpoint::len is a u64 that is fully controlled by user space. This is then assigned to wpinfo-len, which is an int. The bounds check is done on the truncated value while the...

CVE-2026-89877

CVE-2026-89877 affects the saa7164 media driver in the Linux kernel . The root cause is a cleanup bug in saa7164_dev_setup(): the device is added to the global saa7164_devlist before PCI BAR memory regions are requested. If get_resources() fails, the device remains on the list while the probe err...

CVE-2026-89877 media: saa7164: fix cleanup on resource allocation failure

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164devsetup adds the device to the global saa7164devlist before requesting the PCI BAR memory regions. If getresources fails, saa7164devsetup decrements the device...

CVE-2026-89877 media: saa7164: fix cleanup on resource allocation failure

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164devsetup adds the device to the global saa7164devlist before requesting the PCI BAR memory regions. If getresources fails, saa7164devsetup decrements the device...

CVE-2026-89830 f2fs: fix valid block count leak on data block allocation failure

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In allocatedatablock, when allocating a new data block dn-datablkaddr == NULLADDR, incvalidblockcount is called first to increment totalvalidblockcount and iblocks...

CVE-2026-89830

CVE-2026-89830 affects the Linux kernel 's f2fs filesystem. In __allocate_data_block(), when a new data block is allocated (dn->data_blkaddr == NULL_ADDR), inc_valid_block_count() is called to increment total_valid_block_count and i_blocks. If the subsequent f2fs_allocate_data_block() call the...