CVE-2026-90379 wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus is hung, the register reads return 0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in an invalid...

CVE-2026-90313 bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed

In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after cgroupbpfattach failed A potential invalid storage access issue can occur after replacing a cgroup bpf prog. This occurs in the following scenario: 1. prog1 with storage is attached t...

CVE-2026-90313

CVE-2026-90313 affects the Linux kernel BPF/cgroup subsystem. When a cgroup BPF program is replaced using BPF_F_REPLACE and the replacement fails midway (e.g., in bpf_trampoline_link_cgroup_shim or update_effective_progs), the cleanup path frees the new storage but fails to restore pl->storage...

CVE-2026-90379: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus is hung, the register reads return 0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in an invalid...

PT-2026-94661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid storage access issue exists when replacing a cgroup BPF program in multi-attach mode. If the replacement process fails midway—specifically during bpf trampoline link cgroup sh...

PT-2026-94728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mt76 rx poll complete function due to a race condition. This occurs when a Station STA has been removed, but the rx status still maintains a pointer ...

CVE-2026-90004

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions repeatedly split each region until its size becomes small enough to meet the user-defined low limit of the number of regions. The loop assumes...

CVE-2026-89998

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

AZL-101189 CVE-2026-89998 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

DEBIAN-CVE-2026-89998

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-90004

CVE-2026-90004 is a Linux kernel vulnerability in the DAMON (Data Access Monitoring) subsystem (mm/damon/core). The function damon_apply_min_nr_regions() assumes that region splitting (damon_split_region_at()) always succeeds. On a silent memory allocation failure, an invalid pointer can be retur...

CVE-2026-89998 dm: fix race when loading and unloading a table

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-89998

This Linux kernel vulnerability affects the Device Mapper (dm) subsystem. A race condition occurs when userspace issues two concurrent table-load ioctls where one succeeds and the other fails: dm_setup_md_queue walks &md->table_devices without holding a lock, racing against dm_table_destroy → ...

EUVD-2026-80606

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-89998 dm: fix race when loading and unloading a table

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-89998: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

PT-2026-93633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpuidle component within the dt idle genpd functionality. The dt idle pd alloc function uses kasprintf to allocate the full node path and then sets pd-name to the...

PT-2026-93639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when loading and unloading a table. This occurs if userspace initiates two concurrent table load ioctls where one succeeds and the other fails. The issue arises...

PT-2026-93645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the damon apply min nr regions function where the system repeatedly splits regions to meet a user-defined minimum limit. The process relies on the damon split region a...

CVE-2026-90004: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions repeatedly split each region until its size becomes small enough to meet the user-defined low limit of the number of regions. The loop assumes...