CVE-2026-90167: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pending break ownership close may abort an in-flight oplock break while another breaker already holds an opinfo reference. Releasing pendingbreak wakes that waiter, but without serializing the...

PT-2026-95009

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description Privileged package fetch and cache-cleaning operations use race-prone path handling within libmport/fetch.c, libmport/clean.c, libmport/util.c, libmport/bundle read install pkg.c, libmport/delete...

PT-2026-95122

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description A race condition exists in the FileSystem component. A remote attacker who has compromised the renderer process and uses social engineering can bypass system access restrictions by...

PT-2026-94535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the null blk driver when a zoned device is powered off and on repeatedly. The null init zoned dev function allocates the dev-zones array during power-on, but null...

PT-2026-94919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qcom GENI serial DMA TX completion path where the transmit fifo is advanced by the number of bytes recorded in port-tx remaining. If uart flush buffer is executed...

PT-2026-94298

Name of the Vulnerable Software and Affected Versions ash authentication versions 3.9.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description A Time-of-check Time-of-use TOCTOU Race Condition occurs when a magic link is configured with single use token?. This allow...

PT-2026-94715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mt7996 driver where the mt7996 mac reset work function parks the tx worker and disables RX/TX NAPIs before acquiring the dev-mt76.mutex. Because mt76 worke...

CVE-2026-90184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute updates with device setup The attribute store methods generated with NULLBDEVICEATTR refuse to change the configuration of a live device by testing NULLBDEVFLCONFIGURED, but that flag is only...

PT-2026-94472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the rzg2l clear irq int and rzg2l clear tint int functions. These functions perform a read-modify-write operation on the ISCR and TSCR status registers to clea...

CVE-2026-90389: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md: scope memallocnoio to allocation critical sections Storing a memallocnoiosave token in mddev-noioflags lets one task save the token and another task restore it. With concurrent suspend sysfs writes, task A can enter...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow CVE-2026-23172 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663 kernel: RDMA/rxe: Fix race...

PT-2026-94741

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bpf netns link update prog function. The issue occurs because checks for old prog and program type are performed without locking before the netns bpf mutex...

PT-2026-94748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the md module where md start sync checks for spare configuration changes before acquiring the reconfig mutex. Because the rdev state can change before the mute...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UIO Userspace I/O subsystem where a stale pointer is maintained during a failed registration path. After the device add function is called, the UIO device becomes...

PT-2026-94896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fs/resctrl component. The problem occurs due to a race condition between the fallback freer in the rdtgroup kn put function and the primary bulk...

PT-2026-94555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer MIDI component where the snd midi input event function can run while a rawmidi substream is closing. This creates a race condition in snd rawmidi...

PT-2026-94795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the exfat file system where a race condition occurs when a shared writable mapping has its valid size extended via a buffered write or a page fault. In this scenario,...

PT-2026-94871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dax holder notify failure function. The function reads the holder ops variable twice without using READ ONCE, once for a NULL check and once for the indire...

PT-2026-94888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The requested-devices notifier performs lookups of protocol fwnodes from the active protocols IDR Integer ID Management. If th...