CVE-2026-53181 vsock/vmci: fix sk_ack_backlog leak on failed handshake

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

btrfs: fix double free in create_space_info_sub_group() error path

...

UBUNTU-CVE-2026-45964

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 "SUNRPC: Rebalance a kref in authgss.c" added a krefget&gssauth-kref call to balance the gssputauth done in gssreleasemsg, but forgot to add a...

CVE-2026-45964

CVE-2026-45964 concerns the Linux kernel SUNRPC path. The issue is a kref leak in gss_auth when handling an error path in gss_alloc_msg, where a failure to balance references on kstrdup_const() error path caused the gss_auth structure to remain allocated. The fix adds a forward declaration for gs...

CVE-2022-50311 cxl: Fix refcount leak in cxl_calc_capp_routing

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix refcount leak in cxlcalccapprouting ofgetnextparent returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. This function only calls ofnodeput in normal path, missing it in...