Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-119)

The version of kernel installed on the remote host is prior to 5.15.222-158.255. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-119 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in foucreate...

CVE-2026-98832

A flaw was found in the Linux kernel's block control group blk-cgroup subsystem. When associating block I/O requests with control groups, the kernel prematurely re-enables interrupts while internal locks are still held. A local user can trigger this flaw during storage operations, causing an...

Linux Distros Unpatched Vulnerability : CVE-2026-98832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31586)

In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfn cgwbreleaseworkfn calls cssputwb-blkcgcss and then later accesses wb-blkcgcss again via blkcgunpinonline. If cssput drops the last reference, the blkcg can be freed...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

CVE-2026-98832

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

UBUNTU-CVE-2026-98832

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

SUSE CVE-2026-98832

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

DEBIAN-CVE-2026-98832

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

CVE-2026-98832

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

CVE-2026-98832 blk-cgroup: save IRQ state in blkg_tryget_closest()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

CVE-2026-98832

The Linux kernel contains a vulnerability in the blk-cgroup subsystem where the function blkg_tryget_closest() uses spin_lock_irq() and spin_unlock_irq() to manage q->queue_lock. Because spin_unlock_irq() unconditionally enables local interrupts, it can cause a deadlock when called by function...

EUVD-2026-103772

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

CVE-2026-98832 blk-cgroup: save IRQ state in blkg_tryget_closest()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

CVE-2026-98832

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

CLSA-2026-1783414155 kernel: Fix of 12 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - net: afkey: zero aligned sockaddr tail in PFKEY exports CVE-2026-43088 - ip6tunnel: clear skb2-cb in ip4ip6err CVE-2026-43037 - ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach CVE-2026-43038 - blk-cgroup:...

PT-2026-117051

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg tryget closest bio set dev associates the bio with a blkg through bio associate blkg. If the blkg lookup misses, blkg tryget closest takes q-queue lock with spin lock irq and releases it with sp...

CVE-2026-98832: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkgtrygetclosest biosetdev associates the bio with a blkg through bioassociateblkg. If the blkg lookup misses, blkgtrygetclosest takes q-queuelock with spinlockirq and releases it with spinunlockirq...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: blk-cgroup: Skipping the process of destroying a block group during the blkcgactivatepolicy function. When switching IO schedulers for a block device, the blkcgactivatepolicy function may race with concurrent deletions of bloc...

CVE-2026-90325

A flaw was found in the Linux kernel's blk-cgroup component. This vulnerability arises from a race condition that occurs when input/output IO schedulers are switched on a block device simultaneously with the deletion of a blk-cgroup. This timing issue can lead to a use-after-free error, which may...