CVE-2026-89528

A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send specially crafted Read lists that exceed the page budget. This can lead to a NULL pointer dereference during Direct Memory Access DMA mapping, potentially causing a system crash and a denial of service...

CVE-2026-89506

A flaw was found in the Linux kernel's RDMA/uverbs component. A missing update to the UVERBSMETHODREGMR ioctl allows a malicious userspace program to trigger a null pointer dereference in specific RDMA drivers mthca, irdma, siw. This can lead to a system crash, resulting in a Denial of Service Do...

CVE-2026-89592

A flaw was found in the accel/rocket component of the Linux kernel. This vulnerability arises from two issues: a missing null check after a memory allocation failure and an integer overflow when calculating memory requirements based on user-supplied values. An attacker could exploit these flaws t...

CVE-2026-89484

A flaw was found in the Linux kernel's lockd component. This vulnerability occurs when the Network Lock Manager NLM client attempts to initialize file lock operations without successfully allocating a lockowner. This can lead to a NULL pointer dereference during the release of the file lock,...

CVE-2026-89504

A flaw was found in the Linux kernel's regulator subsystem. This vulnerability arises from a programming error where a device tree node pointer is released too early, creating a "dangling pointer"—a reference to memory that is no longer valid. This can lead to system instability, potentially...

CVE-2026-89511

A flaw was found in the qede driver in the Linux kernel. Under specific memory pressure conditions, the driver can encounter a NULL pointer dereference when processing network traffic using TPA TCP Segmentation Offload continuation fragments. This issue stems from an uninitialized data pointer,...

CVE-2026-89489

A flaw was found in the Linux kernel. The sysor1katomic syscall, specific to the openrisc architecture, does not adequately validate user-provided pointers. An unprivileged process can exploit this by supplying kernel addresses to the syscall, gaining unauthorized read and write access to kernel...

CVE-2026-89457

A flaw was found in the s390/dasd component of the Linux kernel. An unprivileged local user can trigger a null pointer dereference by reading specific world-readable sysfs attributes while the device is being brought online. This can lead to a kernel panic, resulting in a denial of service...

CVE-2026-80992

A flaw was found in the net: ravb component of the Linux kernel. This vulnerability allows for a NULL pointer dereference when the Precision Time Protocol PTP clock's index is queried before it is properly initialized or if its registration fails. This issue could lead to a system crash, resultin...

CVE-2026-89555

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS subsystem. When processing specially crafted Geneve packets through an MPLS multipath setup, a use-after-free vulnerability occurs. This issue arises because a cached header pointer hdr is not reloaded after pskbmaypull...

DEBIAN-CVE-2026-89769

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhpsetupstate error path When cpuhpsetupstate fails after pitclockeventpercpuinit has successfully called requestirq, the error handling jumps directly to outpitclocksourceunregister...

DEBIAN-CVE-2026-89770

In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fsbiointegrityalloc might not allocate a bio integrity payload if PI verification is disabled on the block device. Check for that case before calling fsbiointegrityfree in...

CVE-2026-89770

In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fsbiointegrityalloc might not allocate a bio integrity payload if PI verification is disabled on the block device. Check for that case before calling fsbiointegrityfree in...

DEBIAN-CVE-2026-89758

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...

DEBIAN-CVE-2026-89750

In the Linux kernel, the following vulnerability has been resolved: tracing/userevents: Clear copied tracing state before fork duplication duptaskstruct copies usereventmm from the parent into the child, without grabbing a reference to it. usereventmmdup should replace it, but it leaves that copi...

CVE-2026-89749

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

DEBIAN-CVE-2026-89740

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

AZL-100154 CVE-2026-89740 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

AZL-100431 CVE-2026-89733 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In uvcfunctionbind error path, we use usbepfreerequest which uses uvc-controlreq but does not set it to NULL afterwards. Thus, uvc-controlreq is a...