SUSE CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

SUSE CVE-2026-97537

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dmafree and bitmap locking qla25xxfreereqque and qla25xxfreerspque have two pre-existing bugs exposed on the error path of qla25xxcreatereq,rspque: 1. When dmaalloccoherent fails during queu...

SUSE CVE-2026-97998

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens on the 1 - 0 transition; the unlink from hashes can occur with any refcount. Uncooperative userspac...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

CVE-2026-97998

A flaw was found in the Linux kernel's netfilter subsystem. A race condition in the nfnetlinklog packet logging component allows a local user to trigger concurrent instance destruction by issuing an unbind request while a queue destruction event is pending. This issue leads to an invalid memory...

CVE-2026-97993

A flaw was found in the Linux kernel's vhost-vdpa subsystem. A local attacker can cause a Denial of Service DoS by exploiting a race condition when updating interrupt configurations with an invalid file descriptor. Because the kernel temporarily installs an unvalidated error pointer into the devi...

EUVD-2026-89729

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

CVE-2026-97499

A flaw was found in the Linux kernel's CoreSight subsystem. A race condition occurs in the Embedded Trace Macrocell ETM performance event callbacks when accessing device pointers during concurrent device registration and unregistration. A local user could exploit this vulnerability by running...

CVE-2026-97986

A flaw was found in the Linux kernel's virtioinput driver. A race condition during device removal can lead to a Denial of Service DoS via a kernel crash. Because the driver unregisters the input device before resetting the underlying virtual device, in-flight event callbacks may access freed devi...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...

CVE-2026-97977

A flaw was found in the Linux kernel's Bluetooth USB driver. A race condition during device closure or disconnection allows background receive tasks to continue running after the associated device data has been released, leading to a use-after-free UAF condition. A local attacker could exploit th...

CVE-2026-97975

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when child network devices are unregistered concurrently while Bluetooth connection cleanup routines reparent child devices. A local user can exploit this timing issue to trigger a NULL pointer dereference,...

CVE-2026-97974

A flaw was found in the Linux kernel's IPv6 networking subsystem. This flaw allows a local user to cause a Denial of Service DoS by triggering a system crash. The vulnerability is caused by a race condition during concurrent network route modifications and deletions, leading to a null pointer...

AlmaLinux 9.6 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1767094035)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767094035 advisory. - Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of...

CVE-2026-47497: Time-of-check Time-of-use (TOCTOU) Race Condition

NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor GSP tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

ROS-20260930-73-0133

The vulnerability of the ntfs3/attrlist.c component in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure using corrupted NTFS images...

ROS-20260930-73-0116

The vulnerability of the scsi/qla2xxx/qlaos.c component of the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0139

The vulnerability of the ptypeseqnext and ptypeseqshow functions in the net/core/net-procfs.c module of the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-103413

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the kernel mode layer where a privileged user can trigger a race condition, resulting in an out-of-bounds write. This condition occurs when two or...

CVE-2026-47565: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition that leads to an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,...