CVE-2026-80739

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739 net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

EUVD-2026-70343

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739

CVE-2026-80739 affects the Linux kernel 's mlx5_core driver (Mellanox/NVIDIA network hardware), specifically the TC (Traffic Control) offload path in net/mlx5e. When __mlx5e_add_fdb_flow() fails for a peer flow , the cleanup path mlx5e_tc_del_flow() acquires the ESW devcom lock unconditionally wh...

CVE-2026-80739 net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

SUSE CVE-2026-74370

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

Jupyterlab Python Library 4.1.x < 4.5.10 / 4.6.x < 4.6.2 (CVE-2026-73627)

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. The detected version of the JupyterLab Python package is 4.1.x prior to 4.5.10, or 4.6.x prior to 4.6.2. It is, therefore, affected by a vulnerability: - JupyterLab...

PT-2026-90879

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5e add fdb flow fails in lower levels, the flow is deleted via mlx5e tc del flow, and mlx5e tc del flow is acquiring ESW devcom lock without condition. ...

CVE-2026-80739: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

PT-2026-84937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An AA deadlock occurs in the Linux kernel when mlx5e add fdb flow fails in lower levels. The failure triggers the deletion of the flow via mlx5e tc del flow, which acquires the ESW devco...

PT-2026-85292

Name of the Vulnerable Software and Affected Versions core-moos versions prior to 10.4.1 Description A denial of service issue exists in the MOOSCommServer::ListenLoop function. The accept thread performs a blocking receive without a timeout during the wire-protocol handshake. An attacker can...

SUSE CVE-2026-74354

In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmaplock in zappages zapvmarange requires the owning mm's mmaplock to be held. Taking mmapreadlock under arena-lock would AB-BA against arenavmclose and arenamapmmap, both of which run with mmapwritelock held and then...

SUSE CVE-2026-74396

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5rumrupdatexlt allocates and DMA maps an XLT buffer with mlx5rumrcreatexlt. The buffer is released by the common cleanup path through mlx5rumrunmapfreexlt. After...

SUSE CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

The vulnerability of the hvpciprobe() function in the drivers/pci/controller/pci-hyperv.c file of the Linux operating system’s PCI device driver module allows a hacker to cause a service failure.

The vulnerability of the hvpciprobe function in the drivers/pci/controller/pci-hyperv.c file of the Linux kernel’s PCI device driver module is related to the lack of lock checking. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-72282

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

SUSE CVE-2026-72336

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before reading hcon-l2capdata and before lowpancontrolwrite later dereferences...

SUSE CVE-2026-72388

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dmafence objects can be shared with other subsystems, they may be accessed from hardirq context in those drivers, and we have to take that into...

SUSE CVE-2026-74617

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

CVE-2026-80606

A flaw was found in the Linux kernel's drm/xe/userptr component. When a specific test configuration is enabled, the system attempts to perform a write operation while holding a read-only lock. This incorrect lock handling leads to an assertion failure, which can cause system instability or a deni...