PT-2026-94879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi child dev find function drops the reference returned by device find child prematurely. This can lead to a race condition...

PT-2026-94633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the scsi qla2xxx driver, the qla2x00 sysfs read vpd function performs a redundant call to ha-isp ops-read optrom. This second call occurs after the optrom mutex has been released, whi...

PT-2026-94850

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bcm-vk module where the bcm vk sync msgq function populates message queue information and sets the msgq inited variable. Because atomic set and atomic read...

PT-2026-94945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mac80211 hwsim stop function when draining the data-pending queue. The process currently checks if the queue is empty using skb queue empty before calling...

PT-2026-94555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer MIDI component where the snd midi input event function can run while a rawmidi substream is closing. This creates a race condition in snd rawmidi...

PT-2026-94965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the zynqmp dma remove function between runtime Power Management PM and device removal. The issue occurs because runtime PM is disabled only after the system...

PT-2026-94721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 remove interface function where the wcid mask bit is cleared without a lock and before the RCU wcid pointer is cleared. Because the mask is a non-atomic...

PT-2026-94946

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the cgroup/cpuset component where the nr deadline tasks variable in the cpuset structure can be corrupted. This occurs because the variable can be modified...

PT-2026-94896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fs/resctrl component. The problem occurs due to a race condition between the fallback freer in the rdtgroup kn put function and the primary bulk...

PT-2026-94741

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bpf netns link update prog function. The issue occurs because checks for old prog and program type are performed without locking before the netns bpf mutex...

CVE-2026-90264: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: always wait for ordered extents to avoid OE races BUG Syzbot reported a bug that there can be conflicting OEs for the same range: BTRFS critical device loop4: panic in insertorderedextent:264: overlapping ordered extents,...

PT-2026-94612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Btrfs file system of the Linux kernel. When a direct IO operation finishes short, the system reverts the isize to its original value to ensure append write...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the teardown of Display Manager DM I2C adapters. Because these adapters may remain visible to userspace while the teardown process is active, a concurrent...

PT-2026-94966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in AXIDMA and MCDMA interrupt handlers. The issue occurs when multiple descriptors are queued and active, and an interrupt fires after completing only some of the...

PT-2026-94533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where configfs attribute stores are not properly serialized with a lock. This occurs because the NULLB DEVICE ATTR store does not utilize a lock,...

PT-2026-94999

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where parallel execution of claim addition and backbone modification can lead to CRC corruption. The batadv bla add claim function handles adding...

CVE-2026-93150: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Make nrdeadlinetasks an atomict The nrdeadlinetasks variable in the cpuset structure was introduced by commit 6c24849f5515 "sched/cpuset: Keep track of SCHEDDEADLINE task in cpusets". It is reported by sashiko 1 th...

PT-2026-94673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the blkcg activate policy function when switching IO schedulers on a block device. This occurs when the function races with a concurrent blkcg deletion, which...

PT-2026-94596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched: cls api component where a race condition occurs during the insertion of a protocol. In the tc new tfilter function, if a request loses a race to insert ...