PT-2026-90475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kmemleak scan function where it scans every task stack under a single rcu read lock without a reschedule point. On hosts with a very large number of threads, this...

CVE-2026-80954: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev-desc in i3cdevicegetsupportedxfermode i3cdevicegetsupportedxfermode uses dev-desc to obtain the master controller. However, dev-desc must not be dereferenced unless bus-lock is held, and this...

CVE-2026-80953: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI state, transfer queue list and transfer queue lock are initialized. A...

CVE-2026-89521: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

PT-2026-90376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Network File System server NFSD during admin state revocation. The problem occurs because a stateid contains a pointer to the nfs4 client without...

PT-2026-96533

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick next task operates on all sibling rqs under one acquisition of the shared core-wide lock. A -pick task that releases the rq lock leaves every...

CVE-2026-89520: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared core-wide lock. A -picktask that releases the rq lock leaves every...

PT-2026-90236

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the core scheduling mechanism where the pick next task function operates on sibling runqueues under a shared core-wide lock. If pick task releases the runqueue...

PT-2026-90421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd dispatch function where the rq status counter is not consistently restored to an even value on all exit paths. Specifically, cache-hit RC REPLY, drop RC DROPI...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107324 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: lock overflowing for IOPOLL syzbot reports an issue with overflow filling for IOPOLL:...

PT-2026-90378

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw exists in the NFSD client teardown process. The destroy client function releases a client's open owners, but a lock owner whose only reference is a blocked lock...

PT-2026-90217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ring-buffer component. The ring buffer subbuf order set function can clear cpu buffer-free page without proper synchronization. To prevent races with ring...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107295 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4xattrsetentry creates new EA inodes while...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107320 advisory. In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 hwpoison,...

PT-2026-90224

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/ucma component where the ucma set ib path function calls ucma event handler during a write path without acquiring the necessary handler lock. This failure to...

PT-2026-96554

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs exorcise daemon drops queued messages from a dying daemon without holding ecryptfs msg ctx lists mux, but ecryptfs msg ctx alloc to free requires that lock. Tak...

PT-2026-90428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the nfsd4 ssc expire umount function when iterating through the nn-nfsd ssc mount list. The function drops the nfsd ssc lock to execute mntput on the source...

PT-2026-90408

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the nfsd component where the nfsd break one deleg function sets the NFSD4 CALLBACK RUNNING bit to serialize recall work before calling nfsd4 run cb to queue the recall. If...

PT-2026-90084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the i3c component where the function i3c device get supported xfer mode dereferences dev-desc to obtain the master controller without holding the bus-lock. This...

PT-2026-90325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ecryptfs component. The function ecryptfs exorcise daemon drops queued messages from a dying daemon without holding the ecryptfs msg ctx lists mux lock...