CVE-2026-97424

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-93221

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4endgrace guards its drain path with a...

CVE-2026-93221: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4endgrace guards its drain path with a...

CVE-2026-93215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdxcreateresattr, if sysfscreatebinfile fails, the code frees resattr but doesn't set cdxdev-resattrnum to NULL. This leaves a dangling pointer in the array. Then...

PT-2026-98058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/ras component where cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini. This mismatch requires the release site t...

ALSA-2026:71233 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: block: zero non-PI portion of auto integrity buffer CVE-2026-23007 kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite CVE-2026-53266...

ALSA-2026:71641 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124477 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. Tenable has extracted the preceding...

PT-2026-98010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where a double fput occurs during error handling within the cachefiles create tmpfile function. A double fput is a condition where the reference...

CVE-2026-93810

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput in error handling in cachefilescreatetmpfile...

CVE-2026-93827

In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtiofssetupvqs allocates fs-vqs and fs-mqmap before calling virtiofindvqs. If virtiofindvqs fails, the error path frees both pointers and returns an error to virtiofsprobe...

PT-2026-104898

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput in error handling in cachefiles create tmpfile...

CVE-2026-97424: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-93810: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput in error handling in cachefilescreatetmpfile...

PT-2026-98027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the virtio-fs component. The virtio fs setup vqs function allocates fs-vqs and fs-mq map before calling virtio find vqs. If virtio find vqs fails, the error...

CVE-2026-93827: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtiofssetupvqs allocates fs-vqs and fs-mqmap before calling virtiofindvqs. If virtiofindvqs fails, the error path frees both pointers and returns an error to virtiofsprobe...

CVE-2026-93800

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insertdirtysubvol If during relocation we fail in insertdirtysubvol because btrfsupdaterelocroot returned an error, we will leave a root's relocroot field pointing to a reloc...

PT-2026-104991

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insert dirty subvol If during relocation we fail in insert dirty subvol because btrfs update reloc root returned an error, we will leave a root's reloc root field pointing to...

CVE-2026-93800: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insertdirtysubvol If during relocation we fail in insertdirtysubvol because btrfsupdaterelocroot returned an error, we will leave a root's relocroot field pointing to a reloc...

PT-2026-98000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Btrfs file system where a failure in the insert dirty subvol function, caused by an error returned by btrfs update reloc root, leads to a use-after-free or double...