CVE-2026-99051 fsverity: RCU-delay the freeing of struct fsverity_info

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

EUVD-2026-108846

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

CVE-2026-99051

The Linux kernel contains a vulnerability in the fsverity component where __fsverity_get_info() calls rhashtable_lookup_fast() using only rcu_read_lock(), failing to directly synchronize with fsverity_remove_info(). This lack of synchronization can lead to a use-after-free condition during concur...

CVE-2026-99051 fsverity: RCU-delay the freeing of struct fsverity_info

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

CVE-2026-99050 gpio: mpsse: fix race when arming the IRQ poll worker

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpiompsseirqenable arms the poll worker before publishing it: schedulework runs before the worker is added to priv-workers. If gpiompssedisconnect walks the list in that windo...

CVE-2026-99050

The Linux kernel contains a race condition in the gpio: mpsse component. Specifically, gpio_mpsse_irq_enable() arms the poll worker before it is published, creating a window where gpio_mpsse_disconnect() might miss the worker. This results in a use-after-free vulnerability because the USB core fr...

EUVD-2026-108845

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpiompsseirqenable arms the poll worker before publishing it: schedulework runs before the worker is added to priv-workers. If gpiompssedisconnect walks the list in that windo...

CVE-2026-99050 gpio: mpsse: fix race when arming the IRQ poll worker

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpiompsseirqenable arms the poll worker before publishing it: schedulework runs before the worker is added to priv-workers. If gpiompssedisconnect walks the list in that windo...

CVE-2026-99049 gpio: xilinx: fix runtime PM leak on request error path

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pmruntimegetsync leaves the usage counter incremented even when it fails, and xgpiorequest returns the error without dropping it. gpiolib does not call -free when -request...

EUVD-2026-108844

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pmruntimegetsync leaves the usage counter incremented even when it fails, and xgpiorequest returns the error without dropping it. gpiolib does not call -free when -request...

CVE-2026-99049

The Linux kernel contains a runtime PM leak within the xilinx gpio driver. The issue occurs because pm_runtime_get_sync() increments the usage counter even on failure, and xgpio_request() returns errors without releasing the reference. Because gpiolib fails to call ->free() on request errors, ...

CVE-2026-99049 gpio: xilinx: fix runtime PM leak on request error path

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pmruntimegetsync leaves the usage counter incremented even when it fails, and xgpiorequest returns the error without dropping it. gpiolib does not call -free when -request...

EUVD-2026-108843

In the Linux kernel, the following vulnerability has been resolved: gve: fix napidisable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napidisable and napienable. However, the netdev lock has already been acquired before ndobpf is calle...

CVE-2026-99048 gve: fix napi_disable deadlock when attempting to disable XSK pools

In the Linux kernel, the following vulnerability has been resolved: gve: fix napidisable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napidisable and napienable. However, the netdev lock has already been acquired before ndobpf is calle...

CVE-2026-99048 gve: fix napi_disable deadlock when attempting to disable XSK pools

In the Linux kernel, the following vulnerability has been resolved: gve: fix napidisable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napidisable and napienable. However, the netdev lock has already been acquired before ndobpf is calle...

CVE-2026-99048

The Linux kernel contains a deadlock vulnerability within the GVE component when attempting to disable XSK pools . The root cause is that GVE calls the unlocked versions of napi_disable and napi_enable while the netdev lock is already held due to support for queue management operations. This resu...

EUVD-2026-108842

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

CVE-2026-99047 gve: fix XSK buffer leak when rings are stopped

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

CVE-2026-99047

The Linux kernel contains a vulnerability in the GVE component where XSK buffers are leaked when resetting ring states during queue stops. The root cause is that GVE fails to free buffers attached to an allocated buf_state when stopping rings, causing all posted buffers to be leaked. This issue w...

CVE-2026-99047 gve: fix XSK buffer leak when rings are stopped

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...