CVE-2026-93231: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

PT-2026-104862

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move free irq out of the close-time spinlocked section au1000 close calls free irq while aup-lock is still held with spin lock irqsave. free irq can sleep because it takes the IRQ descriptor request mutex, so it does...

PT-2026-104847

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi eh lock door scsi eh lock door is called from scsi restart operations while the host is still in the SHOST RECOVERY state, i.e. before the host is switched back to SHOST RUNNING...

PT-2026-97981

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular dependency exists in the SCSI core during error handling. The function scsi eh lock door, called by scsi restart operations while the host is in the SHOST RECOVERY state, uses...

CVE-2026-97514: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...

CVE-2026-93269: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-96744: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence...

PT-2026-97881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock exists in the usb gadget f tcm module within the usbg make tpg function. The issue occurs because usbg make tpg holds dep lock while calling configfs depend item unlocked, whi...

PT-2026-97908

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory control group memcg where dying tasks can become stuck in the exit path for extended periods. This occurs when the oom reaper a kernel mechanism that attemp...

PT-2026-97948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the lock set class function. This occurs because register lock class can return NULL if the lock class pool is exhausted, graph lock fails, or key...

PT-2026-98037

Name of the Vulnerable Software and Affected Versions MongoDB integration for Laravel affected versions not specified Description Improper neutralization of special elements in the data query logic within the cache lock implementation allows a caller-supplied lock owner value to be evaluated as a...

Linux Distros Unpatched Vulnerability : CVE-2026-93818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent...

Linux Distros Unpatched Vulnerability : CVE-2026-93268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handl...

PT-2026-98015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the au1000 close function where free irq is called while the aup-lock is held via spin lock irqsave. Because free irq can sleep while acquiring the IRQ descriptor...

CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

PT-2026-104937

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request MR in-band interrupt event. The driver handles...

Linux Distros Unpatched Vulnerability : CVE-2026-97515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a...

CVE-2026-93818: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...

CVE-2026-93819: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

CVE-2026-93822: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead ...