CVE-2026-74334

The CVE-2026-74334 issue affects the Linux kernel RDMA/nldev path, where locking around mr->pd was unsafe because pd became variable under rereg_mr and touches could race. The fix uses mr->device instead of mr->pd->device and introduces an rdma_restrack_sync() operation to ensure stal...

CVE-2026-74334 RDMA/nldev: Fix locking when accessing mr->pd

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr-pd Sashiko points out that, due to reregmr, the PD is actually variable and all the touches in nldev are racy. Use mr-device instead of mr-pd-device. Getting the PD restrack ID is more...

EUVD-2026-59481

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr-pd Sashiko points out that, due to reregmr, the PD is actually variable and all the touches in nldev are racy. Use mr-device instead of mr-pd-device. Getting the PD restrack ID is more...

CVE-2026-72372 afs: Fix lack of locking around modifications of net->cells_dyn_ino

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

CVE-2026-72372

CVE-2026-72372 affects the Linux kernel in the afs subsystem, fixing a race when modifying net->cells_dyn_ino. The patch adds exclusive locking via net->cells_lock and changes the removal of a cell from net->cells_dyn_ino to afs_destroy_cell_work() instead of afs_cell_destroy(), because ...

EUVD-2026-59271

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

CVE-2026-72372 afs: Fix lack of locking around modifications of net->cells_dyn_ino

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

CVE-2026-72340 net: microchip: vcap: fix races on the shared Super VCAP block

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...

CVE-2026-72313 drm/fb-helper: Only consider active CRTCs for vblank sync

In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to the vblank of an active CRTC. Go over the list of CRTCs and pick the first that matches. Fixes warnings as the one shown below 77.201354...

CVE-2026-72293

In the Linux kernel CVE-2026-72293, the KVM s390 vsie path is affected: missing radix_tree_preload() in _gaccess_shadow_fault() could stall forward progress. The core of _gaccess_shadow_fault() has been split into ___gaccess_shadow_fault() to simplify locking. The fix adds the missing radix_tree_...

CVE-2026-72282 KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

CVE-2026-72282 KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

CVE-2026-72190

CVE-2026-72190 : The Linux kernel NTFS handling has a deadlock in rename due to mismatched lock ordering on mrec_lock between inodes and their parent directories. The functions ntfs_file_fsync(), ntfs_dir_fsync(), and __ntfs_write_inode() acquire an inode’s mrec_lock before its parent directory’s...

EUVD-2026-58913

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...

CVE-2026-72155 mtd: spi-nor: swp: Improve locking user experience

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...

CVE-2026-72155 mtd: spi-nor: swp: Improve locking user experience

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...

CVE-2026-72155

CVE-2026-72155 concerns the Linux kernel driver mtd: spi-nor: swp, where unlocking the first- or early-blocks can fail when attempting to unlock only currently locked blocks. The root cause is that when both sides can achieve the same result (unlock everything), the lock_len logic misbehaved beca...

CVE-2026-72121 can: bcm: add locking when updating filter and timer values

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when updating timer and filter content while bcmrxhandler, bcmrxtimeouthandler...

CVE-2026-72069 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the following UAF scenario: T1 T2 spinlock&p-lock; rcureadlock; invalidatep;...

EUVD-2026-59027

In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the following UAF scenario: T1 T2 spinlock&p-lock; rcureadlock; invalidatep;...