CVE-2026-64103 scsi: isci: Fix use-after-free in device removal path

In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in iscihostalloc drivers/scsi/isci/init.c:496 and scheduled from both MSI-X and legacy interrupt handlers...

EUVD-2026-45631

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadfolio to wait on writeback Fix netfsreadfolio to wait for an ongoing writeback to complete so that it can trust the dirty flag and whatever is attached to folio-private folio-private may get cleaned up by the...

CVE-2026-64020

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dmavecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dmavec allocation was getting leaked on the completion...

EUVD-2026-45593

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dmavecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dmavec allocation was getting leaked on the completion...

CVE-2026-63874

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...

CVE-2026-63894

Summary (CVE-2026-63894): A race in Linux kernel’s FunctionFS DMABUF handling allows a freed usb_request to be dequeued via an obsolete priv->req pointer when cancelling a DMABUF attachment. The root cause is that ffs_epfile_dmabuf_io_complete() frees the request but leaves priv->req pointi...

CVE-2026-63883

The CVE relates to the Linux kernel serial driver for Qualcomm GENI: a kfifo underflow race when uart_flush_buffer() runs before the DMA completion IRQ. The race sequence can cause stale DMA data to be submitted due to kfifo_len() being reset to 0 while tx_remaining is nonzero, leading to an inco...

CVE-2026-63883

In the Linux kernel, the following vulnerability has been resolved: serial: qcomgeni: fix kfifo underflow when flush precedes DMA completion IRQ When uartflushbuffer runs before the DMA completion IRQ is delivered, the following race can occur all steps serialized by uartportlock: 1. DMA starts:...

EUVD-2026-45559

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...

CVE-2026-63821

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM, the completion callback is never executed. Currently, the driver...

EUVD-2026-45486

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

CVE-2026-63821 wifi: rtw88: usb: fix memory leaks on USB write failures

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM, the completion callback is never executed. Currently, the driver...

OESA-2026-3027 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

CVE-2026-53368

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

PT-2026-61200

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the qcom geni serial driver when uart flush buffer is executed before the DMA completion interrupt request IRQ is delivered. If kfifo reset is called while a D...

SUSE-SU-2026:22754-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22821-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22740-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22797-1 Security update for vim

This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary Code Execution via C Omni-Completion...

The vulnerability of the urb_write_completion() function in the RDP client FreeRDP allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the urbwritecompletion function in the RDP client FreeRDP relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...