Linux Distros Unpatched Vulnerability : CVE-2026-89655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During th...

Linux Distros Unpatched Vulnerability : CVE-2026-89766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing...

Linux Distros Unpatched Vulnerability : CVE-2026-89715

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS/localio: fix ref leak on nfsuuidaddfile failure When nfsuuidaddfile races with nfsuuidput tearing down uuid-net, it returns -ENXIO without publishing...

Linux Distros Unpatched Vulnerability : CVE-2026-89451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/sva: Set handle-dev before the SVA handle is visible iommuattachdevicepasid installs the new SVA attach handle in the group PASID lookup before...

Linux Distros Unpatched Vulnerability : CVE-2026-89764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to revoke a Devres concurrently. The driver core's...

Linux Distros Unpatched Vulnerability : CVE-2026-89508

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file...

Linux Distros Unpatched Vulnerability : CVE-2026-89667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the...

Linux Distros Unpatched Vulnerability : CVE-2026-89540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs...

Linux Distros Unpatched Vulnerability : CVE-2026-89503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page wi...

Linux Distros Unpatched Vulnerability : CVE-2026-89669

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: initialize copy-notify stateid before publishing it nfsd4copynotify finished initializing the cpntf state after nfs4allocinitcpntfstate had already linke...

Linux Distros Unpatched Vulnerability : CVE-2026-89771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Fix subbuf resize race with ring buffer readers tracebuffer subbufsize is read lockless in ringbufferreadpage and ringbufferreadstart, while it can...

Linux Distros Unpatched Vulnerability : CVE-2026-89623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cann...

CVE-2026-89603

A flaw was found in the Linux kernel. A race condition exists where a seccomp filter, intended to restrict system calls, can be bypassed by an unprivileged process. This occurs when a thread is stopped for tracing ptrace and another thread attempts to apply a seccomp filter with the...

CVE-2026-89705

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. This vulnerability occurs due to a synchronization issue where a status counter rqstatuscounter is not correctly reset on all exit paths within the nfsddispatch function. This can lead to a race condition where a lockles...

CVE-2026-89667

A flaw was found in the Linux kernel's Network File System Daemon nfsd file caching mechanism. A race condition can occur during concurrent shutdown operations and file disposal, where a file might be unhashed and moved to a dispose list, but the shutdown process misses it. This can lead to a...

CVE-2026-89451

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit SVA Shared Virtual Addressing component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not properly initialized. A local attacker could exploit this flaw by...

Chromium CVE-2026-85045: Race condition in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-89662

A flaw was found in the Linux kernel's Network File System Daemon NFSD. During client teardown, a race condition can occur where a lock owner is freed while still being referenced, leading to a use-after-free vulnerability. This can result in a NULL dereference, potentially causing a system crash...

CVE-2026-89764

A flaw was found in the Linux kernel's rust: devres component. A race condition exists when two processes attempt to revoke a Devres resource concurrently. This can lead to a use-after-free vulnerability, where one process might free resources that another process is still actively using. Such an...

CVE-2026-89708

A flaw was found in the Linux kernel's NFS daemon nfsd. During the teardown of an NFSv4 session, a race condition can occur where the session's memory is freed while an active callback task still holds a reference to it. This can lead to a use-after-free vulnerability, potentially causing system...