PT-2026-93452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Micro Engine Scheduler MES, which fails to perform heavy-weight Translation Lookaside Buffer TLB invalidation after unmapping queues. This allows in-flight...

PT-2026-93642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the hid bpf ops destroy device and hid bpf unreg functions. This occurs because the coordination between device destruction and BPF link release uses a...

PT-2026-93400

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description A race condition in the gNSI Authz service occurs on platforms running Arista EOS when multiple gRPC Network Security Interface gNSI transports are configured. This condition may cause a...

PT-2026-93587

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC cs35l33 component where the cs35l33 runtime suspend function powers down the codec and enables regcache cache onlytrue without first quiescing the threaded IR...

PT-2026-93663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the f midi2 USB gadget driver. The function f midi2 opts str show handles internal string locking, but its callers dereference the opts-info. pointer...

CVE-2026-90020: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

CVE-2026-89985: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: memcg: keep folio's objcg same as its node memcgreparentobjcgs has an inherent assumption that a folio's objcg is the objcg of the folio's node. Folio migration across nodes breaks that assumption: the new folio simply inherits t...

CVE-2026-89916: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry A VNCR TLB invalidation can occur on one vcpu while another vcpu is faulting in this same page. Without correctly handling this, we can end up with the...

CVE-2026-73463: Concurrent Execution using Shared Resource with Improper Synchronization

On affected platforms running Arista EOS, when multiple gRPC Network Security Interface gNSI transports are configured, a race condition in the gNSI Authz service may cause a policy rotation to fail silently. An authenticated user whose access was revoked by the new policy may retain unauthorized...

CVE-2026-89855: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysfs reset operation 0x20261 calls getflashversion, which reads hardware flash registers, without holding ha-optrommutex. The...

PT-2026-93643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free bug exists in the ftrace component. When the trace instance files set ftrace filter and set ftrace notrace are opened, a race condition occurs where the system attempts ...

PT-2026-93538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Consumer Electronics Control CEC media subsystem where the cec receive notify function reads the exclusive follower pointer without utilizing the adapter lock. Thi...

PT-2026-93444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/nouveau component where the nouveau channel del function destroys the fence context before unsubscribing from the channel-kill event. This creates a race...

PT-2026-93496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the qla2xxx SCSI driver, the sysfs reset operation for updating cache versions without reset 0x20261 calls the get flash version function to read hardware flash registers without...

PT-2026-93668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the qcom-pmic-typec driver where cc debounce dwork is queued via set cc and start toggling callbacks. Because port stop returns before the TCPM kthread worker ...

PT-2026-93498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla nvme ls reject iocb function fails to acquire the necessary lock when allocating from and advancing the request ring. This occurs...

PT-2026-93554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel KVM arm64 vgic-v3 component, the vgic v3 save pending tables function iterates through dist-lpi xa using xa for each and dereferences the returned struct vgic irq...

CVE-2026-89913: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgicv3savependingtables vgicv3savependingtables iterates dist-lpixa using xaforeach and dereferences the returned struct vgicirq in the loop body without holding a reference on the LP...

PT-2026-93684

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zram module where the slot lock bit position is incorrectly handled on big-endian 64-bit systems. The slot lock is a bit operation performed on the lock word, whic...

CVE-2026-90043: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on the whole lock word, which flags and actime alias as two u32s. On little-endian the lock bit lands in the position ZRAMENTRYLOCK reserves i...