CVE-2026-64473

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...

CVE-2026-64419

CVE-2026-64419 is a Linux kernel vulnerability in the mm/shrinker subsystem. The function shrinker_debugfs_count_show() invokes a shrinker's ->count_objects() callback while holding an RCU read-side lock . The zswap shrinker's callback flushes memcg statistics via css_rstat_flush(), which may ...

EUVD-2026-48963

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

CVE-2026-64419 mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

CVE-2026-64419 mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

CVE-2026-64419

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

CVE-2026-64417 mm: shrinker: fix NULL pointer dereference in debugfs

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

EUVD-2026-48961

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

CVE-2026-64417

CVE-2026-64417 is a NULL pointer dereference in the Linux kernel's shrinker debugfs subsystem. The function shrinker_debugfs_add() unconditionally creates both "count" and "scan" debugfs files, assuming every shrinker implements both count_objects() and scan_objects(). Shrinkers like xen-backend ...

CVE-2026-64417 mm: shrinker: fix NULL pointer dereference in debugfs

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

CVE-2026-64417

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

Linux Distros Unpatched Vulnerability : CVE-2026-64419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs count file...

CVE-2026-64473: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...

CVE-2026-64419: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs "count" file of a memcg-aware shrinker can sleep inside an RCU read-side critical section: BUG: sleeping function called from invalid context at...

PT-2026-64638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the debugfs implementation of the memory management shrinker. The function shrinker debugfs add unconditionally creates count and scan debugfs files,...

PT-2026-64694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VFIO component where vfio unregister group dev calls vfio device del before vfio device debugfs exit. Because device del releases devres device-managed resources,...

PT-2026-64640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Reading the debugfs count file of a memcg-aware shrinker can cause the system to sleep inside an RCU read-side critical section. This occurs because the shrinker debugfs count show...

CVE-2026-64417: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

Linux Distros Unpatched Vulnerability : CVE-2026-64417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both count...

Linux Distros Unpatched Vulnerability : CVE-2026-64473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with...