PT-2026-128169

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Reset the vCPU's MMU pointer back to the root MMU if loading L2 state fails in the "not from VM-Entry" case, i.e. when emulating RSM or handling KV...

CVE-2026-99132

In the Linux kernel, the following vulnerability has been resolved: xfs: don't hold buffer locks across sync transaction commit in xfssyncsbbuf xfssyncsbbuf holds sb/rtsb buffer locks across a synchronous xfstranscommit, which flushes the CIL push workqueue internally. If shutdown occurs during t...

CVE-2026-99133

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket iucvsendctrl sizes the skb through a NULL iucv-hsdev. SOMSGLIMIT accepts...

CVE-2026-99169

In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUTOFFMMSHARED A FUTOFFMMSHARED futex is a shared futex that refers to an MM. It is possible for a process to wait on a shared futex with a different MM because a FUTOFFINODE waiter can be requeue...

PT-2026-128334

The GPIO syscall handlers in drivers/gpio/gpio handlers.c did not validate the pin argument supplied by a user-mode caller. z vrfy gpio pin configure, z vrfy gpio pin get config and z vrfy gpio pin interrupt configure verified only the device object K SYSCALL DRIVER GPIO / K SYSCALL OBJ and then...

CVE-2026-99102

In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...

CVE-2026-99102: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_setattr_size()…

In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...

CVE-2026-99186: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in…

In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 "x86/insn: Simplify foreachinsnprefix" made foreachinsnprefix declare its own loop counter named idx. getsegregoverrideidx keeps its result in ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146893 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ip6gre: require CAPNETADMIN in the device netns for changelink ip6grechangelink and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146656 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146825 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146698 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping A bare lock owner -- its only...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146675 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read BUG A corrupted append-DIO dinode high byte at...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146615)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146615 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146650 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ sndharmonycreate registers the IRQ before...

PT-2026-128123

In the Linux kernel, the following vulnerability has been resolved: io uring/cancel: don't spin on local work the task can't run io uring cancel generic refuses to sleep while any ring on the exiting task's tctx has local work pending. It assumes the task is that ring's submitter and that the nex...

Linux Distros Unpatched Vulnerability : CVE-2026-99138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix use-after-free in dotcpgetsockoptTCPCCINFO dotcpgetsockopt reads icsk-icskcaops and dereferences the getinfo function pointer without rcureadlock. With...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146828 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146878 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt...

CVE-2026-99183

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when looking up a scheduler schedtocore walks rdev-cores up to rdev-numcores, and rocketremove decrements numcores for every core it removes. Unbind a core that is not the last one and the cor...