CVE-2026-54575: Improper Neutralization of Special Elements used in an OS Command

mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/clean.c, libmport/util.c, libmport/bundlereadinstallpkg.c, libmport/deleteprimative.c, and...

CVE-2026-93052: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgqinited bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers call bcmvkdrvaccessok before accessing the message queues and their cached queue information...

CVE-2026-93152: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

PT-2026-94142

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs in the device control handler when multiple threads issue concurrent IOCTL Input/Output Control requests. This issue is caused by improp...

CVE-2026-93169: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmpdma: fix race between runtime PM and device removal In zynqmpdmaremove, runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind rmmod path...

CVE-2026-90206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix maxqid race between configfs and controller allocation The function nvmetsubsysattrqidmaxstore can race against nvmetallocctrl when a subsystem's maxqid limit is modified. Suppose maxqid is currently 64. If...

PT-2026-94538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the null blk component, a race condition exists during initialization. The mutex init&lock function is called after configfs register subsystem, which exposes the nullb subsystem to...

PT-2026-94549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the net: page pool component. The problem occurs due to a race condition during xa cmpxchg when page pool destroy executes page pool scrub concurrent...

PT-2026-94432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the workqueue and netdev during the probe and remove processes in the octeontx2-vf driver. This occurs because the VF workqueue is not initialized before...

PT-2026-94515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the close operation may abort an in-flight oplock break while another breaker holds an opinfo reference. Due to a lack of serialization during t...

PT-2026-94721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 remove interface function where the wcid mask bit is cleared without a lock and before the RCU wcid pointer is cleared. Because the mask is a non-atomic...

PT-2026-94741

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bpf netns link update prog function. The issue occurs because checks for old prog and program type are performed without locking before the netns bpf mutex...

PT-2026-94748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the md module where md start sync checks for spare configuration changes before acquiring the reconfig mutex. Because the rdev state can change before the mute...

PT-2026-94892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where Get or Set Feature payloads exceeding the mailbox payload size are split into multiple mailbox commands. Because the mbox mutex only serializes individual commands...

PT-2026-94743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the isp1704 charger power supply component where the remove path unregisters the notifier and power supply without waiting for queued or running work. This can lead to...

PT-2026-94795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the exfat file system where a race condition occurs when a shared writable mapping has its valid size extended via a buffered write or a page fault. In this scenario,...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94838

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dw-edma component of the dmaengine where the pause and resume functions read and update channel state without holding the vc.lock lock. Simultaneously,...

PT-2026-94839

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dw-edma component of the dmaengine. The function dw edma abort interrupt releases the vc.lock before updating the request and status. This allows the issue...

PT-2026-94850

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bcm-vk module where the bcm vk sync msgq function populates message queue information and sets the msgq inited variable. Because atomic set and atomic read...