UBUNTU-CVE-2026-99280

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduselock across IDR lookup in open path vdusedevopen looks up struct vdusedev through the IDR and then acquires dev-lock only after vduselock has been dropped. This creates a race condition where a concurrent...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: postpone memmgr IDR destruction to hprivrelease Currently, the memory manager IDR is destroyed when a user releases a file descriptor. However, at this point the user context may still be active, and memory...

PT-2026-128149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists between the st remove and st open functions. The st remove function drops the probe reference on the scsi tape using kref put before removing its...

PT-2026-139552

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between st remove and st open st remove drops the probe reference on the scsi tape with kref put and only afterwards removes its index from st index idr. If that was the last reference, scsi tape...

CVE-2026-93086

A flaw was found in the Linux kernel's armscmi firmware component. During the cleanup of transmit and receive channels, the scmicleanupchannels function performs an unsafe operation by removing entries from a kernel data structure IDR while it is being iterated. This can lead to an invalid iterat...

Linux Distros Unpatched Vulnerability : CVE-2026-98629

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with ...

DEBIAN-CVE-2026-98629

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

AZL-108719 CVE-2026-98629 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

CVE-2026-98629

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

UBUNTU-CVE-2026-98629

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

CVE-2026-98629

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

CVE-2026-98629

The Linux kernel contains a vulnerability in the net/sched: cls_u32 component regarding manual hash table handle IDR aliasing . A u32 hash table created with an explicit handle keys its IDR entry on the raw handle, but the destroy path frees it using handle2id(handle). For handles in the 0x800..0...

CVE-2026-98629 net/sched: cls_u32: fix manual hash table handle IDR aliasing

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

EUVD-2026-103543

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

CVE-2026-98629

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

CVE-2026-98629 net/sched: cls_u32: fix manual hash table handle IDR aliasing

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

PT-2026-117073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the of/overlay component where the of overlay fdt apply function stores the return value of idr alloc in ovcs-id before verifying it. If the allocation fails, a negati...

CVE-2026-98629: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle 'tc filter add ... handle 801: u32 divisor N' keys its IDR entry on the raw handle, while the destroy paths free it und...

PT-2026-128604

In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered of overlay fdt apply stores the idr alloc return value in ovcs-id before checking it. On failure the stored id is negative, free overlay changeset's "if ovcs-id" check...