PT-2026-97942

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the btrfs component of the Linux kernel. In the invalidate and check btree folios function, the system waits for an extent buffer to finish reading and then...

abrt security update

2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...

AlmaLinux 8 : kernel-rt (ALSA-2026:71016)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71016 advisory. kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto CVE-2026-63831...

CVE-2026-93218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

CVE-2026-93218

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

CVE-2026-93208

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

CVE-2026-92628 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

CVE-2026-92628 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

CVE-2026-92628

GitLab CE/EE versions 18.6 before 19.2.7 , 19.3 before 19.3.3 , and 19.4 before 19.4.1 are affected by a race condition in the MCP search tool . Improper synchronization during shared state handling could lead to search results being returned under an incorrect user context . GitLab has remediate...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete

A flaw was found in the Linux kernel's MACsec Media Access Control Security component. A race condition during the deletion of an offloaded MACsec RX Security Channel SC allows the RX datapath to access and operate on memory that has already been freed. This use-after-free vulnerability can lead ...

kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios

A flaw was found in the Linux kernel's Bluetooth RFCOMM subsystem. A race condition in the rfcommttysettermios function allows a session to be freed while it is still actively in use. This use-after-free UAF vulnerability can be exploited by a local attacker. Successful exploitation leads to a...

CVE-2026-82406

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...

EUVD-2026-85573

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...

kernel: drm/amdgpu: Fix use-after-free race in VM acquire

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This vulnerability involves a timing issue, known as a race condition, during the process of acquiring a Virtual Machine VM. When multiple processes attempt to access the same VM simultaneously, a local attacker could exploit this flaw...

SUSE CVE-2026-95280

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-95344

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

SUSE CVE-2026-95360

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

Security Bulletin: This Power System update is being released to address CVE-2026-43198

Summary The Linux kernel is used by the Virtualization Management Interface in PowerVM to support network communication with the Hardware Management Console. This bulletin provides a remediation for the impacted vulnerability, CVE-2026-43198, by upgrading PowerVM and thus addressing the exposure ...