CVE-2026-64419

The CVE-2026-64419 entry concerns the Linux kernel mm/shrinker path, where shrinker_debugfs_count_show() invokes the ->count_objects() callback while holding rcu_read_lock, allowing a sleep in that context. The root cause is that the debugfs count probe for memcg-aware shrinkers slept inside a...

CVE-2026-64419

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

EUVD-2026-48963

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

EUVD-2026-48961

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

CVE-2026-64417

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

CVE-2026-64417

CVE-2026-64417 relates to the Linux kernel mm shrinker and a NULL pointer dereference in debugfs. The issue arose because shrinker_debugfs_add() created both the optional debugfs files “count” and “scan” unconditionally, assuming every shrinker implements both count_objects() and scan_objects(). ...

CVE-2026-64417 mm: shrinker: fix NULL pointer dereference in debugfs

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

Linux Distros Unpatched Vulnerability : CVE-2026-64473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as...

PT-2026-64640

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker debugfs count show Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

PT-2026-64638

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker debugfs add creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both count objects and scan objects, which is not...

Linux Distros Unpatched Vulnerability : CVE-2026-64419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs count file of a memcg-aware shrinker can sleep inside an RCU read-side critica...

Linux Distros Unpatched Vulnerability : CVE-2026-64417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both count and scan debugfs files unconditionally. That assumes every shrinker...

PT-2026-64694

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfs create devm seqfile store a devres allocated debugfs devm entry as inode private data. vfio unregister group dev currently calls...

DEBIAN-CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

UBUNTU-CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

EUVD-2026-48660

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-64251

CVE-2026-64251 concerns a Linux kernel bug in the pwrseq core where use-after-free occurs in the pwrseq_debugfs_seq_next() path due to incorrect reference counting. The fix standardizes reference management across seq_file callbacks to prevent prematurely dropped references: start() now returns a...

CVE-2026-64251 pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

PT-2026-64366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pwrseq debugfs seq next function. The function declares a next variable with freeput device, which triggers put device when the variable goes out of...