PT-2026-97885

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management subsystem where madvise free huge pmd fails to properly handle device-private Page Middle Directories PMDs. A race condition can occur when an...

PT-2026-97982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component where guest response descriptors are translated into userspace iovecs during command submission. Because target-core completes these commands...

PT-2026-97906

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the show pte function during lockless page-table walks on arm64 architecture. Because the function can run with interrupts enabled, a concurrent teardown may free a...

PT-2026-97875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel between cache shrinking and CPU hotplugging. The function kmem cache shrink does not hold cpus read lock, allowing it to race with CPU...

PT-2026-97878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the nfsd component where the shrinker register function is called before the bucket list heads are initialized via the INIT LIST HEAD loop and the drc hashsize...

PT-2026-97934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Bluetooth management component. The uuid count member of the discovery state structure is accessed and modified without proper locking, creating ...

PT-2026-97942

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the btrfs component of the Linux kernel. In the invalidate and check btree folios function, the system waits for an extent buffer to finish reading and then...

PT-2026-98044

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the netconsole component. The function drop netconsole target unlinks a target while holding only the target list lock. However, when an interface is...

PT-2026-98004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ieee80211 ibss disconnect function within the mac80211 module during the process of leaving an Independent Basic Service Set IBSS. The system flushes...

CVE-2026-97429: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroyqueuecpsch waitondestroyqueue drops locks to wait for queue resume, allowing a concurrent destroy to free the queue. Use isbeingdestroyed flag to serialize destruction...

PT-2026-104919

In the Linux kernel, the following vulnerability has been resolved: netconsole: take target cleanup list lock in drop netconsole target drop netconsole target unlinks the target while only holding target list lock. However, when the underlying interface has been unregistered, netconsole netdev...

CVE-2026-93229

In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memory barrier smprmb before its second counter check. The standard kernel...

abrt security update

2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...

CVE-2026-93221

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4endgrace guards its drain path with a...

PT-2026-104977

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd net boolean flags to unsigned long flags word nfsd net contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4 end grace guards its drain path with...

CVE-2026-93221: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4endgrace guards its drain path with a...

PT-2026-104990

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdev src pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

PT-2026-98021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI altera component when stopping and removing a root bus. The issue occurs when the pci rescan remove lock lock is not held, allowing concurrent rescan o...

CVE-2026-97499

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

CVE-2026-97410

In the Linux kernel, the following vulnerability has been resolved: netconsole: take targetcleanuplistlock in dropnetconsoletarget dropnetconsoletarget unlinks the target while only holding targetlistlock. However, when the underlying interface has been unregistered, netconsolenetdevevent moves t...