CVE-2026-89675 nfsd: fix UAF in async copy cancel and shutdown

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardown caller OFFLOADCANCEL, nfsd4shutdowncopy, nfsd4cancelcopybysb raced the copy kthread: - findasynccopy bumped...

CVE-2026-89675

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardown caller OFFLOADCANCEL, nfsd4shutdowncopy, nfsd4cancelcopybysb raced the copy kthread: - findasynccopy bumped...

PT-2026-90465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the tracing component when the event test stuff function calls kthread run and passes the resulting task struct pointer to kthread stop without validation. If kthread r...

PT-2026-96471

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR PTR to kthread stop event test stuff calls kthread run and unconditionally passes the returned task struct pointer to kthread stop. kthread run returns an error pointer such as ERR PTR-ENOMEM when...

PT-2026-90391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the nfsd component during async copy cancel and shutdown operations. A race condition occurs between a teardown caller such as OFFLOAD CANCEL, nfsd4...

PT-2026-90450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the uvcg video init function. When kthread run worker fails, the system attempts to log an error using uvcg err. However, because the video-uvc point...

CVE-2026-89759: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup when scanning task stacks Patch series "mm/kmemleak: avoid soft lockup when scanning task", v3. kmemleakscan scans every task stack under one rcureadlock with no reschedule point, which can trip the...

PT-2026-90886

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR PTR to kthread stop In test ringbuffer's out free cleanup loop, the check !rb threadscpu only catches NULL entries and misses entries that hold an ERR PTR. rb threads is static, so unassigned...

Linux Distros Unpatched Vulnerability : CVE-2026-80688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and...

SUSE CVE-2026-74670

In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. If network namespace teardown clears ipvs-enable during that phase,...

SUSE CVE-2026-80688

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

CVE-2026-80688

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

CVE-2026-80688

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

UBUNTU-CVE-2026-80688

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

CVE-2026-80688

CVE-2026-80688 affects the Linux kernel on the RISC-V architecture. The vulnerable component is the function vec_check_unaligned_access_speed_all_cpus, which carries an __init annotation but executes within a kthread . If the SBI calls it makes are slow (e.g., due to debug output), the kthread ma...

CVE-2026-80688 riscv: drop __init from vec_check_unaligned_access_speed_all_cpus

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

EUVD-2026-67423

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

CVE-2026-80688 riscv: drop __init from vec_check_unaligned_access_speed_all_cpus

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

PT-2026-82988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RISC-V architecture implementation where the function vec check unaligned access speed all cpus is marked with init. This function operates within a kthread and ma...

CVE-2026-80688: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...