Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There’s a brief window during a reset where a hipri task may try to poll that queue before the block layer has updated the queue...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the maximum size to bytes to match the units of the divisor that calculates the worst-case number of PRP entries. The result is used to determine how many PRP Lists are required. The code...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fixed a race condition in nvmepollirqdisable In the following scenario, pdev can be disabled between 1 and 3 by 2. This sets pdev-msixenabled = 0. Then, pciirqvector returns MSI-X IRQ15 for 1 while returning INTx...

SUSE-SU-2026:24315-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: nct6775 Fix access to temperature configuration registers bsc1222538. - CVE-2025-38704: rcu/nocb: Fix possible invalid...

SUSE-SU-2026:24181-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: nct6775 Fix access to temperature configuration registers bsc1222538. - CVE-2025-38704: rcu/nocb: Fix possible invalid...

SUSE-SU-2026:24182-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: nct6775 Fix access to temperature configuration registers bsc1222538. - CVE-2025-38704: rcu/nocb: Fix possible invalid...

Oracle Linux 8 : kernel (ELSA-2026-75747)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75747 advisory. - nvme/ioctl: check SUBMITIO with CAPSYSADMIN Chris Leech RHEL-269479 CVE-2026-90227 - nvme-pci: fix mempool alloc size Maurizio Lombardi RHEL-230386...

CVE-2026-90233

A flaw was found in the Linux kernel's nvme-pci driver. This vulnerability occurs when descriptor Direct Memory Access DMA pools are created during device probing but are not properly released if the probe operation fails. This oversight leads to a memory leak, where dmapool objects are not freed...

kernel: nvme-pci: fix mempool alloc size

A flaw was addressed in the Linux kernel’s nvme-pci driver related to how the driver calculated the worst-case number of PRP Physical Region Page lists required for a given I/O request. The implementation previously rounded the allocation to one list instead of correctly converting the maximum si...

kernel: nvme-pci: fix mempool alloc size

A flaw was addressed in the Linux kernel’s nvme-pci driver related to how the driver calculated the worst-case number of PRP Physical Region Page lists required for a given I/O request. The implementation previously rounded the allocation to one list instead of correctly converting the maximum si...

kernel security, bug fix, and enhancement update

4.18.0-553.171.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

SUSE CVE-2026-90233

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

Linux Distros Unpatched Vulnerability : CVE-2026-90233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools a...

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-3644)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302...

CVE-2026-90233

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

DEBIAN-CVE-2026-90233

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

EUVD-2026-81826

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

CVE-2026-90233

In the Linux kernel nvme-pci driver, per-NUMA-node descriptor DMA pools are created lazily during nvme_init_hctx_common() but are only released in nvme_remove(). Any probe failure occurring after the admin tag set is allocated unwinds through the out_disable label and nvme_pci_free_ctrl(), neithe...

CVE-2026-90233 nvme-pci: release descriptor pools on probe failure

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

CVE-2026-90233 nvme-pci: release descriptor pools on probe failure

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...