CVE-2026-93268

The Linux kernel contains a vulnerability in the ext4 filesystem where a circular lock dependency can cause a deadlock during mount operations. Specifically, the ext4_try_to_expand_extra_isize() function is called from __ext4_mark_inode_dirty() while holding an active jbd2 handle . During mount (...

CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

EUVD-2026-86140

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93252

The Linux kernel contains a circular locking dependency within the ocfs2 filesystem in the ocfs2_init_acl() function. The deadlock occurs between &oi->ip_xattr_sem and &journal->j_trans_barrier. Specifically, Path 1 (setxattr) acquires ip_xattr_sem before starting a transaction (acquiring j...

EUVD-2026-86124

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252 ocfs2: fix circular locking dependency in ocfs2_init_acl()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252 ocfs2: fix circular locking dependency in ocfs2_init_acl()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93220 sched_ext: Keep kick_sync waiting on the rq's own CPU

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

CVE-2026-93220

The Linux kernel contains a vulnerability in sched_ext where the kick_sync_wait_bal_cb() function incorrectly assumes it always executes on the request queue's (rq ) own CPU. Because the rq lock can be dropped while the callback is queued, it may be executed on a foreign CPU . This leads to compa...

EUVD-2026-85949

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

CVE-2026-93220 sched_ext: Keep kick_sync waiting on the rq's own CPU

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

CVE-2026-93214 usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock dependen...

CVE-2026-93214

A deadlock vulnerability exists in the Linux kernel within the usb gadget f_tcm component. The issue occurs in usbg_make_tpg() because it holds the dep_lock while calling configfs_depend_item_unlocked(), which acquires the configfs root inode lock. This creates a circular lock dependency with con...

EUVD-2026-85943

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock dependen...

CVE-2026-93214

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock dependen...

CVE-2026-93214 usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock dependen...

CVE-2026-77798

Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module...

CVE-2026-77798

The Velociraptor software contains a deadlock condition within its user management module . This issue is caused by a lock management bug and can be triggered by authenticated users . The primary impact is a high availability risk, potentially leading to a denial of service . No specific patch ve...

CVE-2026-77798 Velociraptor Authenticated Denial of Service

Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module...