CVE-2026-80547 s390/vfio_ccw: Implement a crw lock

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Implement a crw lock Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware. Implement a...

CVE-2026-80547

This vulnerability affects the Linux kernel 's s390/vfio_ccw subsystem (Virtual Function Interface for Channel-Word devices on the s390 architecture). The root cause is a missing lock on the CRW (Control Region Word) region, which handles asynchronous hardware events; without it, the list of payl...

EUVD-2026-66450

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535 xfs: don't double-lock when deleting a self-referential directory

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80535

CVE-2026-80535 affects the Linux kernel XFS file system. The dirtree scrubber can detect a directory that refers to itself; in that case, the directory tree repair code incorrectly attempts to iolock/ilock both sc->ip and dp, which are the same inode, resulting in a double-lock . The fix detec...

CVE-2026-80535 xfs: don't double-lock when deleting a self-referential directory

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-74749

CVE-2026-74749 affects the Linux kernel 's rseq (restricted sequence) subsystem. When __exit_to_user_mode_loop() invokes rseq_grant_timeslice_extension() with interrupts enabled, a granted time slice extension calls hrtimer_rearm_deferred_tif(), which in turn calls __hrtimer_rearm_deferred() — a ...

CVE-2026-74749 rseq: Prevent hard lockup on granted time slice extension

In the Linux kernel, the following vulnerability has been resolved: rseq: Prevent hard lockup on granted time slice extension exittousermodeloop invokes rseqgranttimesliceextension with interrupts enabled. If the extension is granted it invokes hrtimerrearmdeferredtif to ensure that a pending...

CVE-2026-74745

CVE-2026-74745 is a deadlock vulnerability in the bnxt network driver within the Linux kernel . When unregistering an IRQ affinity notifier, the driver synchronously waits for the callback while holding the netdev instance lock; the callback itself attempts to cancel work under the same lock, cau...

CVE-2026-74745 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers waits for the callback synchronously. bnxt takes the netdev instance lock in the notifier to restart the queue and cancels the wo...

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Cybersecurity researchers have disclosed details of a phishing-as-a-service PhaaS platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode. SOCRadar Threat Research Unit STRU...

EUVD-2026-66250

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

CVE-2026-58093

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

EUVD-2026-66166

GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulnerability in the IP lock manager, which allows remote authenticated users to add, modify, or delete IP lock entries for arbitrary accounts via tools.php?action=iplock...

PT-2026-82125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the bnxt driver when canceling an IRQ affinity notifier. The issue arises because unregistering IRQ affinity notifiers waits for the callback synchronously, while th...

CVE-2026-74745: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers waits for the callback synchronously. bnxt takes the netdev instance lock in the notifier to restart the queue and cancels the wo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098982 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to che...

Linux Distros Unpatched Vulnerability : CVE-2026-80549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098741 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcconnclose. syzbot reported a null-ptr-deref in tipcconnclose duri...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098691)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098691 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbas...