CVE-2026-99117

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...

CVE-2026-99142

In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushing predicateparse uses the first operator stack entry before processing any opening parentheses. A push then increments top before writing. The existing check still permits that...

CVE-2026-99136

In the Linux kernel, the following vulnerability has been resolved: dm-crypt: fix a tiny race condition in cryptdecpending cryptdecpending reads io-error before calling atomicdecandtest. Another context, for example cryptendio called from an interrupt, may set io-error and drop its reference...

CVE-2026-99148

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.26. It stems from ocfs2/dlm failing to use dlmrecostatelock during the read of the recovery participant list in debugfs. This allows debugstateprint to traverse the list concurrently with dlmdestroyrecoveryarea, potentially leading to...

PT-2026-128121

In the Linux kernel, the following vulnerability has been resolved: sctp: validate chunk length in the inqueue parser SCTP chunks always include a four-byte generic header, but sctp inq pop currently accepts shorter declared lengths. A zero-length chunk leaves chunk end at the current header. Whe...

PT-2026-128179

In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in get seg reg override idx Commit 45e1dccc0653 "x86/insn: Simplify for each insn prefix" made for each insn prefix declare its own loop counter named idx. get seg reg override idx keeps...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises when cifsdotruncate updates isize without a cached handle; when findwritablefile returns null, no setfilesize operation is performed, causing isize to be set to 0. Subsequently, if cifsopen fails, the inode size becomes 0 whi...

CVE-2026-99197

In the Linux kernel, the following vulnerability has been resolved: net: mv643xx: move setting of netops to fix crash mv643xxethprobe connects the PHY before dev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commit in question, ...

CVE-2026-99114: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in…

In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in FSCONTROLINFORMATION smb2getinfofilesystem reports 48 bytes for FSCONTROLINFORMATION, that is the whole of struct smb2fscontrolinfo, but never assigns FileSystemControlFlags. Those four...

PT-2026-128161

In the Linux kernel, the following vulnerability has been resolved: mshv vtl: Check per-CPU register page before mmap Register-page setup is optional for each CPU. If allocation or registration fails, mshv vtl configure reg page warns and leaves that CPU's reg page NULL, but initial context setup...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It arises because ntfssetattrsize fails to hold a mapping-invalidatelock when updating isize and adjusting disk attributes. This can lead to page errors and resize conflicts, potentially causing VCN parsing failures and generating...

PT-2026-128095

In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate lock in ntfs setattr size ntfs setattr size updates i size and resizes the on-disk attribute without holding mapping-invalidate lock. Page faults take the lock shared, so a fault racing the resize can resolv...

CVE-2026-99203

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure FSETFL and FIOASYNC decide whether to invoke -fasync before pipefasync takes pipe-mutex. Two enables of one ORDWR FIFO can therefore both enter the callback...

CVE-2026-99137: Linux: In the Linux kernel, the following vulnerability has been resolved: cifs: don't update i_size in cifs_do_truncate…

In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146623)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146623 advisory. In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146648 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: fix race between partial drmdevregister failure and ioctl If drmdevregister fails after...

Linux Distros Unpatched Vulnerability : CVE-2026-99215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: core: prevent unregistering a power supply while a callback runs Once a power supply is registered, its callbacks can immediately start firing fr...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146688)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146688 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtwrestructwmmie rtwrestructwmmie scans inie for a WMM IE...

PT-2026-128203

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket probe stores the return value from rocket device init in the file-scoped rdev pointer before checking whether it is an error pointer. If rocket device init fails, rdev is lef...