CVE-2026-97410

In the Linux kernel, the following vulnerability has been resolved: netconsole: take targetcleanuplistlock in dropnetconsoletarget dropnetconsoletarget unlinks the target while only holding targetlistlock. However, when the underlying interface has been unregistered, netconsolenetdevevent moves t...

CVE-2026-93804

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

CVE-2026-93218

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

CVE-2026-93247

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix 'hdev-discovery.uuids' NULL dereference 'uuidcount' member of struct 'discoverystate' is assigned and read without any locks, so there is a chance of situation when uuidcount != 0, but uuids is NULL and there...

CVE-2026-93208

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

CVE-2026-97478

In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrnirqfddeassign and the eventfd EPOLLHUP wakeup can race and free the same struct hsmirqfd: CPU0 CPU1 ---- ---- eventfdrelease wakeuppollEPOLLHUP hsmirqfdwakeup...

PT-2026-98020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI subsystem for Rockchip platforms when stopping and removing a root bus. The system fails to hold the pci rescan remove lock lock during this process,...

Fedora 43 : chromium (2026-dd12c89e57)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dd12c89e57 advisory. Update to 153.0.8010.52 CVE-2026-91708: Race condition in Network CVE-2026-91709: Type confusion in ServiceWorker CVE-2026-91710: Use after free in...

Linux Distros Unpatched Vulnerability : CVE-2026-97410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netconsole: take targetcleanuplistlock in dropnetconsoletarget dropnetconsoletarget unlinks the target while only holding targetlistlock. However, when the...

CVE-2026-97514

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...

Linux Distros Unpatched Vulnerability : CVE-2026-93285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepare...

abrt security update

2.1.11-60.0.7 - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...

PT-2026-97884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the madvise cold or pageout pte range function where the pmd trans huge lock mechanism incorrectly handles device-private Page Middle Directories PMDs. When a...

PT-2026-97972

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs component where f2fs gc kthread is allocated dynamically. This design can lead to race conditions during the teardown process, specifically involving the f2fs...

Linux Distros Unpatched Vulnerability : CVE-2026-93247

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix 'hdev-discovery.uuids' NULL dereference 'uuidcount' member of struct 'discoverystate' is assigned and read without any locks, so there is ...

Linux Distros Unpatched Vulnerability : CVE-2026-97499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during devi...

PT-2026-104981

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl log net exit calls nf log unset, which clears the logger pointer without an RCU grace period. Immediately after, ops free list...

Linux Distros Unpatched Vulnerability : CVE-2026-77762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer...

Linux Distros Unpatched Vulnerability : CVE-2026-86247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some...

Linux Distros Unpatched Vulnerability : CVE-2026-97429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix UAF race in destroyqueuecpsch waitondestroyqueue drops locks to wait for queue resume, allowing a concurrent destroy to free the queue. Use...