PT-2026-72362

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task mmu: fix hugetlb self-deadlock in pagemap scan pte hole A PAGEMAP SCAN ioctl requesting PM SCAN WP MATCHING on a hugetlb VMA hangs the calling thread, unkillably, as soon as the scan reaches an unpopulated part of th...

PT-2026-72810

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md cloned bio Detect the error path using md cloned bio instead of relying on r1 bio in raid1 or r10 bio-read slot in raid10, which may be NULL or -1 after splitting and resubmitting...

PT-2026-73026

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup in idxd cdev open The failed dev add and failed dev name paths drop the file-device reference while wq-wq lock is still held. If put devicefdev drops the last reference, idxd file d...

PT-2026-73024

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock between metadata writeback and transaction commit When writing out metadata extent buffers in a zoned filesystem, btree writepages holds fs info-zoned meta io lock across the whole writeback loop,...

PT-2026-72975

In the Linux kernel, the following vulnerability has been resolved: qede: sync udp tunnel ports outside qede lock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

Linux Distros Unpatched Vulnerability : CVE-2026-74555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libsas: Fix HA resume deadlock and hisisas disk-wake race Commit fbefe22811c3 scsi: libsas: Don't always drain event workqueue for HA resume introduced...

Linux Distros Unpatched Vulnerability : CVE-2026-74354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Take mmaplock in zappages zapvmarange requires the owning mm's mmaplock to be held. Taking mmapreadlock under arena-lock would AB-BA against arenavmclose a...

PT-2026-72790

In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap lock in zap pages zap vma range requires the owning mm's mmap lock to be held. Taking mmap read lock under arena-lock would AB-BA against arena vm close and arena map mmap, both of which run with mmap write lock he...

PT-2026-72391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An ABBA deadlock occurs in the NTFS driver due to conflicting lock acquisition orders between extent lock and mrec lock. The issue manifests through two competing paths: the inode...

K000162904: Linux kernel vulnerability CVE-2022-50053

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavfclose in iavfresettask error handling. Doing so can lead to double call of napidisable, which can lead to deadlock there. Removing VF would lead to...

CVE-2026-68237

A flaw was found in the Linux kernel's drm/amdgpu/userq component. During a GPU reset, the prereset function only force-completes fences for mapped queues. If a queue is in another state, its last fence remains pending and never signals after the reset. This can cause the eviction/suspend worker...

CVE-2026-68319

A flaw was found in the pdscore component of the Linux kernel. This vulnerability involves a deadlock condition that can occur when the pciresetfunction and pdscremove functions are called concurrently. This can cause the system to become unresponsive, leading to a denial of service. Mitigation T...

CVE-2026-68364

A flaw was found in the drm/amd/display component of the Linux kernel. A deadlock can occur during system suspend and resume operations when video is actively playing. This issue arises due to conflicting locking mechanisms within the display driver, where a function attempting to disable a...

CVE-2026-68296

A flaw was found in the Linux kernel's Generic Routing Encapsulation GRE tunnel implementation. An issue with how lockless transmission was handled for GRE tunnels with Sequence Number SEQ or Checksum CSUM features could lead to a deadlock. This deadlock occurs when the GRE transmit function...

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery ecosystem combines the Session messaging network with blockchain-backed services that...

CVE-2026-68132

A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the dothawallcallback function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further...

CVE-2026-68096

A flaw was found in the Linux kernel's audit subsystem. A local user can trigger a recursive locking deadlock by moving a file that has an existing executable audit rule. This occurs when the audit subsystem attempts to acquire a lock that is already held, leading to a system-wide deadlock. This...

Linux Distros Unpatched Vulnerability : CVE-2026-68296

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed netdevfeatures: convert NETIFFLLTX to dev-lltx, NETIFFLLTX was set...

Linux Distros Unpatched Vulnerability : CVE-2026-68319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pdscore: fix deadlock between reset thread and remove pciresetfunction acquires devicelock before performing the reset. pdscremove is called by the PCI core wit...

Linux Distros Unpatched Vulnerability : CVE-2026-68173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ublk: wait on ublkdevready instead of ub-completion ub-completion is only re-armed by a successful STARTUSERRECOVERY. If the ublk server sends ENDUSERRECOVERY...