kernel: ext4: fix e4b bitmap inconsistency reports

A flaw was found in the Linux kernel's ext4 filesystem. A race condition exists between page migration and bitmap modification within the loadbuddy function. This can lead to bitmap inconsistencies and false positive corruption reports during certain workloads. This issue can affect data integrit...

CVE-2026-93278

A flaw was found in the Linux kernel's Octeon network driver. During interface shutdown, the driver deletes the packet polling mechanism without properly disabling it first, allowing active polling routines to continue running after interrupt handlers are released. A local attacker could exploit...

CVE-2026-98118

A flaw was found in the Linux kernel's netfs network filesystem subsystem. A local user could exploit a race condition during readahead operations to cause a Denial of Service DoS via a system crash. This issue stems from improper synchronization between the application thread and collector threa...

CVE-2026-98116

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...

CVE-2026-98115

A flaw was found in the Linux kernel's ksmbd Server Message Block subsystem, which may lead to a Denial of Service DoS. When terminating multichannel SMB connections, the server fails to properly synchronize and wait for all communication channels to finish before freeing shared session resources...

CVE-2026-93804

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition can occur when disconnecting from an Independent Basic Service Set IBSS, an ad-hoc wireless network while network traffic is simultaneously being transmitted across processor cores. This timing conflict causes da...

CVE-2026-98109

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs during device registration when background initialization tasks execute before internal structures and locks are fully prepared. A local user can trigger this issue during device setup, causing the system to attem...

CVE-2026-98106

A flaw was found in the Linux kernel's Direct Rendering Manager DRM pagemap component. A race condition during memory migration allows a local user to cause a Denial of Service DoS. When device-private memory is migrated to system memory during a page fault, a timing window permits an eviction...

kernel: ext4: fix e4b bitmap inconsistency reports

A flaw was found in the Linux kernel's ext4 filesystem. A race condition exists between page migration and bitmap modification within the loadbuddy function. This can lead to bitmap inconsistencies and false positive corruption reports during certain workloads. This issue can affect data integrit...

CVE-2026-93798

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this flaw to cause a Denial of Service DoS by triggering system instability or a kernel crash. This issue is caused by missing memory barriers and improper state flag management during relocation root cleanup,...

CVE-2026-98163

A flaw was found in the Linux kernel's control group cgroup subsystem. A local user can cause a Denial of Service DoS or potentially achieve privilege escalation by triggering a race condition when reading cgroup process listings while tasks are terminating. Due to improper handling of dying task...

CVE-2026-101017 Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarcpolicy.c. The manipulation results in handling of exceptional conditions. The attack can be executed remotely. The exploit has been ma...

CVE-2026-101016

A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The issue is located in the opendmarc_policy_parse_dmarc function within the libopendmarc/opendmarc_policy.c library. Manipulating specific arguments—including fo, rf, ri, pct, sp, adkim, aspf, rua, and ruf —causes t...

CVE-2026-101016 Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

CVE-2026-101016 Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

ROS-20260928-73-0127

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-99935

A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt of the component Kotlin Community SDK. Performing a manipulation results in handling of exceptional conditions. The attack may be initiated remotely. The pull request to fi...

ROS-20260928-73-0106

The vulnerability of the inetdiagmsgsctpladdrsfill function in the net/sctp/diag.c module of the SCTP protocol implementation in the Linux operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to...

ROS-20260928-73-0008

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2026-101041

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...