Linux Distros Unpatched Vulnerability : CVE-2026-98500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use canceldelayedworksync in remove oxphidremove uses canceldelayedwork for al...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of canceldelayedwork, which does not wait for the ongoing work callbacks to complete during the removal process. As a result, the callbacks are executed concurrently with hidhwclose and hidhwsto...

CVE-2026-98196 wifi: brcmsmac: fix UAF in brcms_free_timer()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcmsfreetimer brcmsfreetimer calls brcmsdeltimer which uses the non-synchronous canceldelayedwork to cancel the timer's underlying delayed work. If the work callback brcmstimer is already running,...

CVE-2026-98196

The Linux kernel contains a Use-After-Free (UAF) vulnerability within the brcmsmac WiFi driver. The issue resides in the brcms_free_timer() function, which calls brcms_del_timer() using the non-synchronous cancel_delayed_work() . If the _brcms_timer callback is already executing, the cancellation...

Linux Distros Unpatched Vulnerability : CVE-2026-98196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmsmac: fix UAF in brcmsfreetimer brcmsfreetimer calls brcmsdeltimer which uses the non-synchronous canceldelayedwork to cancel the timer's underlying...

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition

A use-after-free flaw was identified in the Linux kernel’s media tuner xc5000 driver. In the vulnerable code path, xc5000release calls canceldelayedwork to cancel a pending delayed work item timersleep without guaranteeing that the work handler has fully completed. Under a race condition, the...

CVE-2026-89970

CVE-2026-89970 is a use-after-free vulnerability in the Linux kernel NVMe Target (nvmet) authentication subsystem. During Submission Queue (SQ) teardown, nvmet_auth_sq_free() uses cancel_delayed_work() to stop auth_expired_work, but if the work has already started, cancellation does not wait for ...

CVE-2026-89970 nvmet-auth: Synchronize timeout work during SQ teardown

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmetauthsqfree cancels authexpiredwork with canceldelayedwork. If the work has already started, cancellation does not wait for the callback. Transport teardown can...

EUVD-2026-80570

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmetauthsqfree cancels authexpiredwork with canceldelayedwork. If the work has already started, cancellation does not wait for the callback. Transport teardown can...

CVE-2026-89461: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040work requeues itself after every poll. canceldelayedwork only cancels a pending instance and does not wait for a callback that is already running. If syste...

SUSE CVE-2025-39944

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...

CVE-2022-50305: Use After Free

In the Linux kernel, the following vulnerability has been resolved: ASoC: sofes8336: fix possible use-after-free in sofes8336remove sofes8336remove calls canceldelayedwork. However, that function does not wait until the work function finishes. This means that the callback function may still be...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix port event handling on init For some reason there might be a crash during ports creation if port events are handling at the same time because fw may send initial port event with down state. The crash...

CVE-2021-47023 net: marvell: prestera: fix port event handling on init

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix port event handling on init For some reason there might be a crash during ports creation if port events are handling at the same time because fw may send initial port event with down state. The crash...

CVE-2021-47023 net: marvell: prestera: fix port event handling on init

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix port event handling on init For some reason there might be a crash during ports creation if port events are handling at the same time because fw may send initial port event with down state. The crash...