PT-2026-128180

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf pmu migrate context leaving events behind perf pmu remove walks the group leaders of a CPU and PMU with perf event groups for cpu pmu, removing each one as it goes. perf remove from context takes the leader out of...

PT-2026-128200

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed cmd lock target do delayed work takes dev-delayed cmd lock with a plain spin lock. It runs from system percpu wq, so interrupts stay enabled while the lock is held. Every oth...

PT-2026-128202

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe evict flags switches on tbo-resource-mem type to choose an eviction placement. An xe BO can reach eviction with no ttm.resource, e.g. an imported dma-buf BO whose resource was fre...

PT-2026-128106

In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero the FS OBJECT ID INFORMATION buffer before filling it in smb2 get info filesystem reports 64 bytes for FS OBJECT ID INFORMATION, that is the whole of struct object id info, but writes only 46 of them: - objid is 16...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146817 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpidsterminatecontrolmethod Fix use-after-free issue in...

AlmaLinux 10 : kernel (ALSA-2026:91565)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:91565 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146840 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146247 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer...

CVE-2026-99198

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fix crash owlemacprobe calls owlemacphyinit, which connects the PHY, before netdev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146682)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146682 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isertrecvdone hands each received PD...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146832 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146628 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel regwork before freeing device on remove c4iwuldstatechange queues regwork to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146647 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146846 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type in...

CVE-2026-99110

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in cifsdosetacl cifssetacl validates ACL size using posixaclxattrsize: 4 + count 8 // 4-byte header + 8 bytes per ACE cifsdosetacl then calls posixacltocifs to write the CIFS wire format into the sa...

CVE-2026-99156

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...

CVE-2026-99165

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after association connect wait When message interleaving is enabled, the first send waits for association establishment before building its data chunks. The wait drops the socket lock, and handshake...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2026-99192

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on completion to free the skb and credit BQL. ethersetup leaves...

CVE-2026-99112

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflower: validate mask pointer after nlanext flsetencopt iterates the key's nested tunnel-option attributes with nlaforeachattr while advancing a single mask pointer via nlanext at the bottom of each loop, so the mas...