27 matches found
kernel security update
6.12.0-211.74.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list The RMID of a pseudo-locked group is freed upon its creation. When unmounted, rmdirallsub unconditionally frees all RMIDs of all groups, resulting in a...
CVE-2026-93099
A flaw was found in the Linux kernel's fs/resctrl component. This use-after-free UAF vulnerability occurs when worker threads attempt to access memory that has already been released during CPU hotplug operations. A local attacker could potentially exploit this flaw to cause a system crash, leadin...
SUSE CVE-2026-93099
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing so. They are scheduled via delayedwork embedded in struct...
SUSE CVE-2026-93100
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdtgroupknput A struct rdtgroup is reference counted via rdtgroup::waitcount. Callers that need the structure to remain valid across a sleep while waiting on acquiring rdtgroupmutex take a...
Linux Distros Unpatched Vulnerability : CVE-2026-93100
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/resctrl: Prevent use-after-free in rdtgroupknput A struct rdtgroup is reference counted via rdtgroup::waitcount. Callers that need the structure to remain...
Linux Distros Unpatched Vulnerability : CVE-2026-93099
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing...
CVE-2026-93099
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing so. They are scheduled via delayedwork embedded in struct...
AZL-102354 CVE-2026-93100 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdtgroupknput A struct rdtgroup is reference counted via rdtgroup::waitcount. Callers that need the structure to remain valid across a sleep while waiting on acquiring rdtgroupmutex take a...
DEBIAN-CVE-2026-93100
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdtgroupknput A struct rdtgroup is reference counted via rdtgroup::waitcount. Callers that need the structure to remain valid across a sleep while waiting on acquiring rdtgroupmutex take a...
AZL-101933 CVE-2026-93099 affecting package kernel 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing so. They are scheduled via delayedwork embedded in struct...
CVE-2026-93100 fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdtgroupknput A struct rdtgroup is reference counted via rdtgroup::waitcount. Callers that need the structure to remain valid across a sleep while waiting on acquiring rdtgroupmutex take a...
CVE-2026-93100
CVE-2026-93100 is a use-after-free in the Linux kernel's fs/resctrl subsystem. The race occurs between rdtgroup_kn_put() (which decrements waitcount via atomic_dec_and_test() outside rdtgroup_mutex) and bulk teardown paths (free_all_child_rdtgrp() / rmdir_all_sub()) that hold the mutex. A concurr...
CVE-2026-93100 fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdtgroupknput A struct rdtgroup is reference counted via rdtgroup::waitcount. Callers that need the structure to remain valid across a sleep while waiting on acquiring rdtgroupmutex take a...
CVE-2026-93099 fs/resctrl: Fix UAF from worker threads when domains are removed
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing so. They are scheduled via delayedwork embedded in struct...
EUVD-2026-82207
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing so. They are scheduled via delayedwork embedded in struct...
CVE-2026-93099
This CVE affects the Linux kernel fs/resctrl subsystem, specifically the Resource Director Technology (RDT) filesystem. The vulnerability is a Use-After-Free (UAF) in worker threads mbm_handle_overflow() and cqm_handle_limbo() . The root cause is that these workers may be blocked waiting for cpus...
PT-2026-94896
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fs/resctrl component. The problem occurs due to a race condition between the fallback freer in the rdtgroup kn put function and the primary bulk...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a race condition between the rdtgroupknput function in fs/resctrl and the batch release process. This race condition leads to reusing resources after release, potentially causing double releases...
CVE-2026-93099: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbmhandleoverflow and cqmhandlelimbo workers read event counters and may sleep while doing so. They are scheduled via delayedwork embedded in struct...