CVE-2026-89545 sunrpc: defer rq_argp and rq_resp free until after RCU grace period

In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rqargp and rqresp free until after RCU grace period svcrqstfree frees rqstp-rqargp and rqstp-rqresp synchronously via kfree, but defers the rqstp struct free via kfreercu. After svcexitthread calls listdelrcu and...

CVE-2026-89545 sunrpc: defer rq_argp and rq_resp free until after RCU grace period

In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rqargp and rqresp free until after RCU grace period svcrqstfree frees rqstp-rqargp and rqstp-rqresp synchronously via kfree, but defers the rqstp struct free via kfreercu. After svcexitthread calls listdelrcu and...

CVE-2026-89545

CVE-2026-89545 is a use-after-free in the Linux kernel's sunrpc subsystem. The function svc_rqst_free() frees rqstp->rq_argp and rqstp->rq_resp synchronously via kfree(), while the parent rqstp struct is deferred via kfree_rcu(). After svc_exit_thread() removes the thread from the RCU list,...

CVE-2026-89486

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmdrcvr in ipmidestroyuser Commit 9e91f8a6c868 "ipmi:msghandler: Remove srcu for the ipmiinterfaces list" dropped the synchronizercu between unlinking the command receivers from intf-cmdrcvrs and freei...

CVE-2026-89486 ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmdrcvr in ipmidestroyuser Commit 9e91f8a6c868 "ipmi:msghandler: Remove srcu for the ipmiinterfaces list" dropped the synchronizercu between unlinking the command receivers from intf-cmdrcvrs and freei...

EUVD-2026-76317

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is removed from the flow table. The pointer stays in the flow structure...

PT-2026-90406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the nfsd component. The rpc status netlink dumpit iterates through in-flight svc rqst under rcu read lock and reads operation numbers from the args-ops...

PT-2026-90261

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the sunrpc component. The svc rqst free function synchronously frees rqstp-rq argp and rqstp-rq resp using kfree, while the rqstp structure itself is fre...

PT-2026-90401

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A clock domain mismatch exists in the clients still reclaiming function. The function calculates a deadline using nn-boot time based on CLOCK REALTIME but compares it against ktime get...

K000163252: Linux kernel vulnerability CVE-2026-31581 and CVE-2026-23392

Security Advisory Description CVE-2026-31581 In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6firechipabort, the chip struct is allocated as the card's private data via sndcardnew with sizeofstruct sfirechip. When...

Linux Distros Unpatched Vulnerability : CVE-2026-80758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073352 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoi...

CVE-2026-80849

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock held. On the fast path for established sockets, if the rnextkeyid sent b...

CVE-2026-80758

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables preemption again before returning. If that put drops the final...

CVE-2026-80758 futex: Avoid private hash use-after-free on final put

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables preemption again before returning. If that put drops the final...

PT-2026-85599

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futex private hash put drops the reference to fph before evaluating fph-mm for wake up var. futex ref put enables preemption again before returning. If that put drops the fina...

CVE-2026-80758: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables preemption again before returning. If that put drops the final...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001488 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154llseckeydel mac802154llseckeydel can free...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098831 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release flowtable after rcu grace period on error Call synchronizercu after...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098754 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix use-after-free in nftablesaddchain nftablesaddchain publishes the chain ...