CVE-2026-92628: Concurrent Execution using Shared Resource with Improper Synchronization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

PT-2026-98118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the coresight component during device registration and unregistration. ETM perf callbacks rely on the per-CPU csdev src pointer, which can lead to inconsistent...

PT-2026-98018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when stopping and removing a root bus in the PCI plda component. This occurs when the pci rescan remove lock lock is not held, allowing concurrent rescan or hotpl...

CVE-2026-93239: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix the lockless page-table walk in showpte showpte walks page tables locklessly and can run with interrupts enabled. A concurrent teardown can free a table page while it is being walked. It can also clear a parent ent...

CVE-2026-93239

In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix the lockless page-table walk in showpte showpte walks page tables locklessly and can run with interrupts enabled. A concurrent teardown can free a table page while it is being walked. It can also clear a parent ent...

PT-2026-104920

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and access tcp ses before the parent thread has finished populating tcp ses, which the worker thread accesses locklessly. Also, the kthread run...

PT-2026-97888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the nfsd net structure contains boolean fields accessed from concurrent contexts without proper serialization. Specifically, the nfsd4 end grace function uses a plai...

PT-2026-98029

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SMB client during the creation of the cifsd demultiplex thread. The cifsd thread may execute and access the tcp ses structure before the parent thread has...

CVE-2026-93829: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and access tcpses before the parent thread has finished populating tcpses, which the worker thread accesses locklessly. Also, the kthreadrun mac...

CVE-2026-93217: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...

PT-2026-98019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI mediatek component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent...

PT-2026-98097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the acrn virtual machine component. A race condition can occur between the acrn irqfd deassign function and the eventfd EPOLLHUP wakeup, leading to the...

PT-2026-98063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF race condition exists in the drm/amdkfd component. The wait on destroy queue function drops locks while waiting for a queue to resume, which allows a concurrent...

PT-2026-98022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI iproc component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent rescan...

CVE-2026-93229: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memory barrier smprmb before its second counter check. The standard kernel...

PT-2026-98024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Integration between TLS and sockmap BPF psock contains latent bugs that are exploitable. The issue arises because checking for the presence of a User Level Protocol ULP prior to...

CVE-2026-97410: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netconsole: take targetcleanuplistlock in dropnetconsoletarget dropnetconsoletarget unlinks the target while only holding targetlistlock. However, when the underlying interface has been unregistered, netconsolenetdevevent moves t...

CVE-2026-93285: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...

CVE-2026-93285

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...

PT-2026-104951

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs gc kthread in f2fs sb info Instead of allocating f2fs gc kthread dynamically, embed it in f2fs sb info. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbi store -...