CVE-2026-99204

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debugstateprint walks reco.nodedata and formats their fields. The formatter holds dlm-spinlock, but the recovery...

CVE-2026-99210: Linux: In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure…

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocketprobe stores the return value from rocketdeviceinit in the file-scoped rdev pointer before checking whether it is an error pointer. If rocketdeviceinit fails, rdev is left as ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146674 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146652 advisory. In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIGCHARLCDBLFLASH,...

CVE-2026-99170

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146616 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146642)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146642 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146641 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gsskrb5verifymicv2 gsskrb5verifymicv2 reads the token...

PT-2026-128171

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF "page not present" event arrives through the PF vector, and its reason sits in the per-CPU apf reason.flags until kvm handle async pf reads and clear...

CVE-2026-99187

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfpmumigratecontext leaving events behind perfpmuremove walks the group leaders of a CPU and PMU with perfeventgroupsforcpupmu, removing each one as it goes. perfremovefromcontext takes the leader out of the groups...

CVE-2026-99130: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: don't spin on local work the task…

In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: don't spin on local work the task can't run iouringcancelgeneric refuses to sleep while any ring on the exiting task's tctx has local work pending. It assumes the task is that ring's submitter and that the next...

CVE-2026-99130

In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: don't spin on local work the task can't run iouringcancelgeneric refuses to sleep while any ring on the exiting task's tctx has local work pending. It assumes the task is that ring's submitter and that the next...

CVE-2026-99178: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async #PF flags on a kernel…

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF "page not present" event arrives through the PF vector, and its reason sits in the per-CPU apfreason.flags until kvmhandleasyncpf reads and clears it...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146877 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146666 advisory. In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146685 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uaudio: Fix use-after-free on sound card disconnect gaudiocleanup invokes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146684 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds only a ba...

CVE-2026-99139: Linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in…

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in dotcpgetsockoptTCPCONGESTION dotcpgetsockopt reads icsk-icskcaops-name without holding rcureadlock. Since commit 0baf26b0fcd7 "bpf: tcp: Support tcpcongestionops in bpf", icskcaops can point to...

CVE-2026-99114: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in…

In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in FSCONTROLINFORMATION smb2getinfofilesystem reports 48 bytes for FSCONTROLINFORMATION, that is the whole of struct smb2fscontrolinfo, but never assigns FileSystemControlFlags. Those four...

CVE-2026-99144: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix use-after-free of a destroyed user…

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue A deferred reenqueue can read a freed user DSQ. The request stays on its CPU's deferred list until rundeferred takes it, and the RCU callback that frees...