CVE-2026-98479 scsi: libiscsi_tcp: Check the data direction of a Data-In PDU

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the command...

CVE-2026-98478 scsi: ufs: core: Keep internal commands dispatchable during error handling

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit 08b12cda6c44 "scsi: ufs: core: Switch to scsigetinternalcmd" switched UFS internal commands to allocate requests on hba-host-pseudosdev-requestqueu...

EUVD-2026-103718

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit 08b12cda6c44 "scsi: ufs: core: Switch to scsigetinternalcmd" switched UFS internal commands to allocate requests on hba-host-pseudosdev-requestqueu...

CVE-2026-98478

The Linux kernel contains a vulnerability in the scsi: ufs: core component where internal commands could become non-dispatchable during error handling. Specifically, when ufshcd_err_handling_prepare() calls blk_mq_quiesce_tagset(), it marks all queues in the tagset as quiesced, including the pseu...

CVE-2026-98478 scsi: ufs: core: Keep internal commands dispatchable during error handling

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit 08b12cda6c44 "scsi: ufs: core: Switch to scsigetinternalcmd" switched UFS internal commands to allocate requests on hba-host-pseudosdev-requestqueu...

EUVD-2026-103717

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98477 perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98477

The Linux kernel contains a vulnerability in the perf/core component where __perf_pmu_sched_task() incorrectly passes a NULL pmu_ctx to pmu->sched_task(). This occurs because perf_pmu_sched_task() returns early when cpuctx->task_ctx is set, making cpc->task_epc null. The issue results in...

CVE-2026-98477 perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

EUVD-2026-103716

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccwdevicegetutilstr The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpidtochp can return NUL...

CVE-2026-98476

The Linux kernel contains a NULL pointer dereference vulnerability in the s390/cio component within the ccw_device_get_util_str() function. This occurs because a channel path registry entry associated with a CHPID may be removed while a subchannel's PMCW still references that CHPID, causing chpid...

CVE-2026-98476 s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccwdevicegetutilstr The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpidtochp can return NUL...

CVE-2026-98476 s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccwdevicegetutilstr The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpidtochp can return NUL...

CVE-2026-98475 s390/cmf: Fix virtual vs physical address confusion

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

EUVD-2026-103715

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

CVE-2026-98475 s390/cmf: Fix virtual vs physical address confusion

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

CVE-2026-98475

The Linux kernel is affected by a vulnerability in the s390/cmf component caused by virtual vs physical address confusion . The issue stems from the measurement block address being an absolute address, where the associated schib_config and schib fields were not correctly defined as dma64_t , and ...

CVE-2026-98474 s390/pci: Fix missing device lock in zpci_report_status()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98474

The Linux kernel contains a vulnerability in the s390/pci subsystem where the zpci_report_status() function fails to hold the necessary device lock when accessing a device's driver (specifically when pdev is non-NULL). This missing lock can lead to inconsistent states during recovery. The fix inv...

CVE-2026-98474 s390/pci: Fix missing device lock in zpci_report_status()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...