UBUNTU-CVE-2026-80549

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

UBUNTU-CVE-2026-80535

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

CVE-2026-80562

CVE-2026-80562 affects the Linux kernel 's gpio: ml-ioh driver. The driver's ioh_irq_type(), ioh_irq_enable(), and ioh_irq_disable() callbacks acquire chip->spinlock via spin_lock_irqsave(), but they are invoked while the caller already holds desc->lock (a raw_spinlock_t) with hardirqs disa...

CVE-2026-80562 gpio: ml-ioh: use raw_spinlock_t for the register lock

In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use rawspinlockt for the register lock iohirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger -...

CVE-2026-80549 s390/vfio_ccw: Move cp cleanup out of not operational

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

EUVD-2026-66450

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to...

SUSE CVE-2026-74273

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Block region delete during region creation Expand the range lock, rename it "regionslock", to disable region deletion in the critical period between constructregion and attachtarget, as well as the period between...

CVE-2026-80549: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

Linux Distros Unpatched Vulnerability : CVE-2026-80548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Selectively expand iomutex The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves...

Linux Distros Unpatched Vulnerability : CVE-2026-64779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPad...

CentOS 9 : openssh-9.9p1-13.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-13.el9 build changelog. - Fix information disclosure and data corruption via use-after-free in ssh client CVE-2026-73282 - Fix misinteraction between agent lockin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098736 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098907 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Security Bulletin: Vulnerability in Spring MVC and WebFlux affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Spring MVC and WebFlux has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional...

The vulnerability of the mlx5e_tc_query_route_vport() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5etcqueryroutevport function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...

The vulnerability of the wg_netns_exit_rtnl() function in the drivers/net/wireguard/device.c file of the network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wgnetnsexitrtnl function in the drivers/net/wireguard/device.c file of the Linux kernel’s network device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the functions alx_suspend() and alx_resume() in the drivers/net/ethernet/atheros/alx/main.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the functions alxsuspend and alxresume in the drivers/net/ethernet/atheros/alx/main.c file of the Linux kernel’s Ethernet network adapter driver is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sev_mem_enc_register_region() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sevmemencregisterregion function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the mtk_vcodec_dec_remove() function in the drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_drv.c driver, which supports multimedia devices in the Linux operating system. This vulnerability allows a hacker to cause a service failure.

The vulnerability of the mtkvcodecdecremove function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver code relates to the improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966x_ethtool.c, drivers/net/thernet/microchip/lan966x/lan966x_main.c, and drivers/net/thernet/microchip/lan966x/lan966x_vcap_impl.c of the Linux operating system’s Ethernet network adapter drivers allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966xethtool.c, drivers/net/thernet/microchip/lan966x/lan966xmain.c, and drivers/net/thernet/microchip/lan966x/lan966xvcapimpl.c files of the Linux kernel’s Ethernet network adapter drivers are related to improper resource lockin...