CVE-2026-99147

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS or memory corruption. This issue arises during lock contention when the execution handler drmexec retains a pre-locked object that is about t...

CVE-2026-98881

A flaw was found in the Linux kernel's bridge networking subsystem. An obsolete synchronization call during the deletion of bridge multicast devices causes severe lock contention within the networking layer. A local user could exploit this flaw by repeatedly creating and removing network bridge...

PT-2026-121867

In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci-m lock while waiting for a lease break ack When a cifs.ko client caches a read-handle RH lease via deferred close and a conflicting open arrives, ksmbd breaks the lease and waits for the acknowledgment in wai...

CVE-2026-98418

A flaw was found in the Linux kernel's process scheduler. A local user can cause a Denial of Service DoS by initiating lock contention across processor cores with a task that has processor migration disabled. In this scenario, the scheduler incorrectly triggers a kernel warning when moving the...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent The current timeout handler for the mad agent acquires/releases madagentpriv lock for every timed out WR. This results in heavy locking contention when a higher number of W...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: can: isotp: isotpsendmsg: add result check for waiteventinterruptible When using waiteventinterruptible to wait for a complete transmission, it is important to check the result of waiteventinterruptible, as this function may be...

CVE-2026-90103: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encodelayoutstatsmaxsz budgets XDRQUADLENPNFSLAYOUTSTATSMAXSIZE, i.e. 256 bytes, for the layoutupdate4 body written by the layout driver. The flexfiles record can exceed that...

CVE-2026-80938

A flaw was found in the Linux kernel, specifically within the mt7615 Wi-Fi driver. A deadlock can occur during system suspend operations when the suspend process attempts to acquire a mutex a locking mechanism while simultaneously waiting for a work item macwork that also requires the same mutex...

CVE-2026-89567

A flaw was found in the Linux kernel's jbd2 shrinker. This component, which manages journal buffers, does not correctly account for busy checkpoint buffers. This oversight can cause the shrinker to hold a critical system lock for an extended period when processing many busy buffers. The prolonged...

CVE-2026-89566

A flaw was found in the Linux kernel's jbd2 component. When the kernel's journaling block device jbd2 processes busy checkpoint buffers, it can skip a crucial rescheduling check. This oversight can lead to prolonged holding of a critical lock, causing other central processing units CPUs to wait...

AZL-100253 CVE-2026-89567 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nrtoscan. Busy buffers therefore do not consume the scan budget. If a...

DEBIAN-CVE-2026-89567

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nrtoscan. Busy buffers therefore do not consume the scan budget. If a...

CVE-2026-89566

In the Linux kernel, the following vulnerability has been resolved: jbd2: check needresched when skipping busy checkpoint buffers journalshrinkonecplist skips busy checkpoint buffers when called with JBD2SHRINKBUSYSKIP. The continue statement on this path also skips the needresched check at the e...

CVE-2026-89567

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nrtoscan. Busy buffers therefore do not consume the scan budget. If a...

UBUNTU-CVE-2026-89567

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nrtoscan. Busy buffers therefore do not consume the scan budget. If a...

CVE-2026-89567

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nrtoscan. Busy buffers therefore do not consume the scan budget. If a...

AZL-100602 CVE-2026-80938 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

CVE-2026-80938

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

CVE-2026-80938

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

CVE-2026-89732

CVE-2026-89732 is a deadlock in the Linux kernel 's USB gadget f_fs (function filesystem) subsystem. The root cause is that ffs_ep0_read() holds ffs->mutex while calling wait_event_interruptible_exclusive_locked_irq(), which sleeps without releasing the mutex. When a userspace daemon is pollin...