K000162852: Linux kernel vulnerability CVE-2026-53303

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extensionlist reading with sblock in f2fssbishow In f2fssbishow, the extensionlist, extensioncount and hotextcount are read without holding sbi-sblock. If a concurrent sysfs store...

EUVD-2026-55088

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

CVE-2026-21063

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

CVE-2026-21063

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

CVE-2026-21063

CVE-2026-21063 affects the AppLock component on Android. The issue is an improper export of Android application components, enabling physical attackers to bypass the app lock function. According to the CVE metrics, the exploit has a base CVSS v4.0 score of 6.8 (Medium) with Attack Vector Physical...

PT-2026-69764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A system hang occurs during suspend and resume operations while video is playing. This is caused by an ABBA deadlock—a situation where two different contexts are waiting for each other t...

PT-2026-69790

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the hci sync function fails to hold the hdev-lock during hci conn params lookups. This lack of locking makes list iteration or parameter...

PT-2026-69696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A regression in the GRE tunnel implementation occurs when NETIF F LLTX is converted to the dev-lltx flag. In the functions gre tunnel init and ip6gre tnl init features, the assignment of...

PT-2026-69808

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the cfg80211 module when a netlink socket owning a PMSR session is closed. The function cfg80211 release pmsr queues pmsr free wk to call cfg80211 pmsr process abort...

PT-2026-69797

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue exists in the net/iucv component. The function afiucv hs rcv identifies a destination socket while holding the iucv sk list.lock, but releases the lock and pass...

PT-2026-69526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the mac802154 scan worker function. The function captures the scanning sub-interface under RCU but continues to dereference sdata-dev after rcu read...

PT-2026-69747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AMD IOMMU driver regarding IRQ unsafe locking during guest domain gdom allocation. A lock dependency conflict occurs when a HARDIRQ-safe lock is held while...

PT-2026-69391

Name of the Vulnerable Software and Affected Versions AppLock versions prior to SMR Aug-2026 Release 1 Description Improper export of android application components allows physical attackers to bypass the app lock function. Recommendations Update to SMR Aug-2026 Release 1...

PT-2026-69537

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the x25 kill by neigh function. The function iterates through the global X.25 socket list to find sockets linked to a terminating neighbour. While x25 li...

PT-2026-69805

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component where the ieee80211 do stop function removes AP VLAN packets from the parent ps-bc buf while holding the ps-bc buf.lock with interrupts IRQ...

Linux Distros Unpatched Vulnerability : CVE-2026-68405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs...

CVE-2026-68393: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: extend connhash lookup critical sections Using RCU-protected pointers outside the critical sections without refcount is incorrect and may result to UAF. Extend critical section to cover both hciconnhash lookup...

CVE-2026-68260: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

CVE-2026-21063: Improper Export of Android Application Components

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

CVE-2026-68405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...