EUVD-2026-71239

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a...

CVE-2026-80804 xfs: restore nofs context unconditionally in xfs_trans_roll

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a...

CVE-2026-80764 Bluetooth: hci_event: fix LE list UAF on reset

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs readers...

EUVD-2026-71407

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs readers...

CVE-2026-80762

CVE-2026-80762 is a use-after-free in the Linux kernel Bluetooth HCI subsystem (hci_sync). The function hci_update_event_filter_sync() walks the device's accept list while issuing synchronous HCI commands per remote-wakeup device. The suspend path holds hdev->req_lock, but accept-list mutation...

EUVD-2026-71405

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

EUVD-2026-70777

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the...

PT-2026-85720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bridge multicast component of the Linux kernel. The problem occurs during the teardown of a master VLAN's multicast context. Specifically, the br...

PT-2026-91315

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O TRUNC DAX failure fuse open takes filemap invalidate lock for a DAX truncate dax truncate = true and releases it before the out inode unlock label. But when fuse dax break layouts fails, t...

CVE-2026-80856: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fusedosetattr takes filemapinvalidatelock for a DAX truncate faultblocked = true and releases it at the out:/error: labels. But when a writeback flush is also needed, a...

PT-2026-91304

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse do setattr takes filemap invalidate lock for a DAX truncate fault blocked = true and releases it at the out:/error: labels. But when a writeback flush is also neede...

PT-2026-91786

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx gen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rx lock" which addresses following sashiko-bot findings:...

The vulnerability of the um_tlb_sync() function in the arch/um/kernel/tlb.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the umtlbsync function in the arch/um/kernel/tlb.c module of the Linux operating system is related to the lack of lock checking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-91343

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci event: fix LE list UAF on reset hci cc reset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs reade...

CVE-2026-80804: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a...

Linux Distros Unpatched Vulnerability : CVE-2026-80845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then...

Linux Distros Unpatched Vulnerability : CVE-2026-80739

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and...

Linux Distros Unpatched Vulnerability : CVE-2026-80819

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: take rfcommmutex for the deferred setup accept rfcommsockrecvmsg completes a deferred setup by calling rfcommdlcaccept without holding any...

PT-2026-85605

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci event: fix LE list UAF on reset hci cc reset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs reade...

PT-2026-85645

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs trans roll When xfs trans commit fails in xfs trans roll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection,...