PT-2026-128113

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Cope with the SS bit being set in NPF exit codes When running Hyper-V from Windows 11, KVM is seeing the SS bit set in nested page fault error codes produced for shadowed NPT. The AMD manual is unclear about when SS...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146878 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.19. It arises when a failure in setting up mqueue or ipc sysctl leads to the use of the regular mntput function to unmount a long-lived mount, resulting in leaks of the mount and mqueue superblocks...

CVE-2026-99196: Linux: In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash…

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash au1000probe calls au1000miiprobe, which connects the PHY, before dev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since...

PT-2026-128153

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffer meta for CPUs without a buffer The per cpu/cpuN/buffer meta files are created for every possible CPU, but buffer-bufferscpu is only allocated once that CPU comes online. Reading the file of a CPU...

CVE-2026-99105: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stall when a task enqueued with…

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix stall when a task enqueued with SCXENQLAST lands back on its CPU's local DSQ With SCXOPSENQLAST, the last runnable task on a CPU is passed to ops.enqueue instead of being kept running. Exiting tasks without...

PT-2026-128206

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP CLOSING as once-established Handle the TCP ESTABLISHED - TCP CLOSING transition on OP RST, which can race with the connect loop. Immediately break and return 0 on ESTABLISHED/CLOSING. The return value of connect...

CVE-2026-99143

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separate from program capacity predicateparse adds two to nrpreds to reserve the terminal TRUE and FALSE entries. It also uses that increased value as the limit for parsed predicates. If the...

CVE-2026-99141: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash in print_graph_function_event()…

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash in printgraphfunctionevent tracingsettracer assigns the flags of the newly selected tracer with: tr-currenttraceflags = t-flags ? : t-tracer-flags; If the new tracer defines neither static flags nor default...

PT-2026-128111

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using check mul overflow before calculating the firmware payload size. Reject zero-length payloads and zero...

CVE-2026-99118: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing…

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using checkmuloverflow before calculating the firmware payload size. Reject zero-length payloads and zero MMI...

CVE-2026-99140: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix hist trigger timestamps for buffered…

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix hist trigger timestamps for buffered events Syzkaller triggered a WARNONONCE!nest warning: WARNING: kernel/trace/ringbuffer.c:821 at ringbuffereventtimestamp Call trace: ringbuffereventtimestamp histfieldtimestamp...

CVE-2026-99126

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

CVE-2026-99127: Linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: keep frag_offset aligned for odd-sized…

In the Linux kernel, the following vulnerability has been resolved: pagepool: keep fragoffset aligned for odd-sized requests pagepoolallocfragnetmem rounds the requested fragment size with size = ALIGNsize, dmagetcachealignment; dmagetcachealignment returns 1 unless the architecture defines...

CVE-2026-99101: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: move attribute payload before shrinking its…

In the Linux kernel, the following vulnerability has been resolved: ntfs: move attribute payload before shrinking its record ntfsnewattrflags resizes the non-resident attribute record before moving its name and mapping pairs to their shorter-header offsets when compression or sparse state is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146828 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the...

Linux Distros Unpatched Vulnerability : CVE-2026-99130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/cancel: don't spin on local work the task can't run iouringcancelgeneric refuses to sleep while any ring on the exiting task's tctx has local work...

PT-2026-128180

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf pmu migrate context leaving events behind perf pmu remove walks the group leaders of a CPU and PMU with perf event groups for cpu pmu, removing each one as it goes. perf remove from context takes the leader out of...

PT-2026-128200

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed cmd lock target do delayed work takes dev-delayed cmd lock with a plain spin lock. It runs from system percpu wq, so interrupts stay enabled while the lock is held. Every oth...

PT-2026-128202

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe evict flags switches on tbo-resource-mem type to choose an eviction placement. An xe BO can reach eviction with no ttm.resource, e.g. an imported dma-buf BO whose resource was fre...