CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

DEBIAN-CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

DEBIAN-CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

DEBIAN-CVE-2026-89479

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A packet...

CVE-2026-80957

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

DEBIAN-CVE-2026-80957

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

UBUNTU-CVE-2026-89479

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A packet...

CVE-2026-89479

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A packet...

CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

CVE-2026-89647

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens whenever a lease walk exhausts its nrtoscan budget. This creates a bu...

CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

CVE-2026-80957

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

UBUNTU-CVE-2026-89647

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens whenever a lease walk exhausts its nrtoscan budget. This creates a bu...

UBUNTU-CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

UBUNTU-CVE-2026-80957

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

CVE-2026-89752

A race condition in the Linux kernel's memory cgroup (memcg) subsystem can cause an indefinite reclaim loop when two open files concurrently update memory.max or memory.high. Because kernfs serializes operations only per open file, a first writer may continue reclaiming toward a stale target afte...

CVE-2026-89752 mm: memcg: stop reclaim when a limit update is superseded

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...

EUVD-2026-76664

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...

CVE-2026-89752 mm: memcg: stop reclaim when a limit update is superseded

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...

CVE-2026-89744 device property: fix infinite loop in fwnode_for_each_child_node()

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...