PT-2026-128178

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transaction handling For a split transaction, either fw core handle response or split transaction timeout callback may manipulate the same transaction entry in the pending transaction...

CVE-2026-99108: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfs_trim_fs()…

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfstrimfs aligns the start of a free extent up to the device discard granularity, but derives the discard length by aligning the original extent length down. When the free extent start is not...

CVE-2026-99151

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...

CVE-2026-99200: Linux: In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops…

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisifemac: Move setting of netops to fix crash hisifemacdrvprobe connects the PHY before dev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commi...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It stems from hip04macprobe calling ofPhyConnect before assigning it to ndev-netdevops. As a result, when CONFIGNETSHAPER is enabled, the probe process crashes due to a null pointer dereference...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.4. It stems from improper handling of local work by iouring/cancel; when the ring associated with a task remains disabled, the system erroneously assumes the task is being submitted and spins waiting for it to run locally, which may cause...

CVE-2026-99155

In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...

PT-2026-128098

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix stall when a task enqueued with SCX ENQ LAST lands back on its CPU's local DSQ With SCX OPS ENQ LAST, the last runnable task on a CPU is passed to ops.enqueue instead of being kept running. Exiting tasks without SC...

Zephyr Project Zephyr buffer error vulnerability

Versions Zephyr 2.2.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the GPIO system call handler in drivers/gpio/gpiohandlers.c fails to validate the pin parameter provided by user-mode callers; this may result in out-of-bounds writes of function pointers a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.2. It stems from iucvsockrecvmsg failing to validate the transmission type before sending AFIUCVFLAGWIN. Additionally, within the spinlock-protected region, iucvsendctrl is invoked to allocate memory, potentially allowing unprivileged...

CVE-2026-99172: Linux: In the Linux kernel, the following vulnerability has been resolved: ipc: drop the mqueue mount with kern_unmount() on…

In the Linux kernel, the following vulnerability has been resolved: ipc: drop the mqueue mount with kernunmount on setup failure mqinitns creates the mqueue mount with fcmountlongterm, so its -mntns is MNTNSINTERNAL. When setting up the mqueue or ipc sysctls or msginitns fails afterwards,...

PT-2026-128129

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.29 Linux kernel versions prior to 5.10.273 Description A race condition exists in the dm-crypt module within the crypt dec pending function. The issue occurs because the function reads the io-error variable...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises from the process of adding a GPIO shared proxy; the lifetime of the GPIO lookup table may extend beyond the time when its name string is assigned to the kobject lookup-devid, potentially leading to use-after-free conditions...

CVE-2026-99168: Linux: In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Check per-CPU register page before mmap…

In the Linux kernel, the following vulnerability has been resolved: mshvvtl: Check per-CPU register page before mmap Register-page setup is optional for each CPU. If allocation or registration fails, mshvvtlconfigureregpage warns and leaves that CPU's regpage NULL, but initial context setup...

CVE-2026-99162

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup-devid. Fix a potential UAF by duplicating the...

CVE-2026-99143: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separate from…

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separate from program capacity predicateparse adds two to nrpreds to reserve the terminal TRUE and FALSE entries. It also uses that increased value as the limit for parsed predicates. If the...

CVE-2026-99125

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.12. It arises because rbmetasubbufidx fails to include a meta header when calculating the base address of the subbuffer array; this results in an index offset error. This may lead to null pointer dereferencing and the loss of previously...

CVE-2026-99194: Linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to…

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to fix crash grethofprobe calls grethmdioinit, which connects the PHY, before dev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.2. It stems from improper iteration of event groups during the migration event of perfpmumigratecontext, resulting in certain event groups remaining in their original context. When a CPU is hot-plugged and removed, these event groups are...