PT-2026-94931

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier skips rewriting the helper call offset insn-imm in bpf do misc fixups for architectures that implement bpf...

CVE-2026-90115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...

PT-2026-94478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpa sim component where the vdpasim create function leaves vdpasim-worker as an ERR PTR an error pointer if kthread run worker fails. The subsequent error path...

CVE-2026-90130: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vdpasim: fix cleanup after worker creation failure vdpasimcreate leaves vdpasim-worker as an ERRPTR when kthreadrunworker fails. The error path then drops the device reference, which releases the partially initialized simulator...

CVE-2026-90140: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...

PT-2026-94479

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the NTFS driver when handling resident iomap reads. The function ntfs read iomap begin resident traverses the Master File Table MFT record via ntfs attr lookup and...

CVE-2026-90064: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If suc...

PT-2026-94445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VMBus module where the initialization function hv acpi init does nothing when running in a non-nested root partition but still reports success, leading the module ...

PT-2026-94488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the cuse module of the Linux kernel. The fuse conn put function frees the fuse conn using call rcu asynchronously. If the cuse module is removed via...

PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...

PT-2026-94412

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where the system fails to reject page faults from non-fault-mode scratch VMs. Allowing scratch VMs through the ASID Address Space Identifier looku...

PT-2026-94696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An alignment fault occurs in the Linux kernel when processing MSA ramdumps on WCN3990/SNOC devices using arm64 architecture. The ath10k msa dump memory function utilizes a plain memcpy t...

CVE-2026-90082: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size managdquerymaxresources sizes gc-nummsixusable from resp.maxmsix and the CPU count, but never from the device MSI-X table. On a 1792 vCPU M-series VM that yields 1793...

PT-2026-94690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the BPF subsystem when the arena vm fault function fails to acquire the arena-spinlock. The function returns VM FAULT RETRY, which triggers the do user addr fault pa...

PT-2026-94739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmirror fault function, which is invoked by dmirror read and dmirror write retry loops when a device page table entry is missing. If the mirrored mm memory...

DEBIAN-CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

AZL-101493 CVE-2026-90030 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of the DEPCMD register controls the behavior of the EndTransfer command used to stop an active transfer. Older DWC3 programming guide revisions recommended setting...

DEBIAN-CVE-2026-90030

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of the DEPCMD register controls the behavior of the EndTransfer command used to stop an active transfer. Older DWC3 programming guide revisions recommended setting...

CVE-2026-90030

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of the DEPCMD register controls the behavior of the EndTransfer command used to stop an active transfer. Older DWC3 programming guide revisions recommended setting...