CVE-2026-89933: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

CVE-2026-89974: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: fix double free of fabrics options when nvmeaddctrl fails nvmfcreatectrl owns the fabrics options and frees them whenever -createctrl returns an error, so a transport must not free them on its own error paths. nvme-fc...

Astra Linux – Vulnerability in Firefox and Thunderbird

A use-after-free condition affected the creation of TLS sockets when memory pressure was present. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw was discovered in the Linux kernel’s implementation of Pressure Stall Information. Although this feature is disabled by default, it could allow an attacker to crash the system or cause other memory-corruption side effects...

SUSE CVE-2026-89483

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

SUSE CVE-2026-89618

In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-children and ei-list in initei eventfscreatedir allocates the eventfsinode and initializes it with initei. But this does not initialize the eventfsinode listheads. If the eventfscreatedir fails due to memor...

Linux Distros Unpatched Vulnerability : CVE-2026-89618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Initialize ei-children and ei-list in initei eventfscreatedir allocates the eventfsinode and initializes it with initei. But this does not initialize t...

Linux Distros Unpatched Vulnerability : CVE-2026-89547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: Check svc pool percpu counter allocation svccreate initializes three per-pool percpucounter stats and ignores every return value. On SMP,...

Linux Distros Unpatched Vulnerability : CVE-2026-89511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA...

CVE-2026-89531

A flaw was found in the Linux kernel's svcrdma module. A remote attacker can exploit this vulnerability by repeatedly attempting connections when the system is under memory pressure. This can lead to a resource leak of rdmacmid objects, which, if amplified, could result in a Denial of Service DoS...

CVE-2026-89483

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe subsystem. Under specific memory pressure conditions, a local user could trigger a scenario where uninitialized kernel memory is used and potentially exposed. This could lead to information disclosure, revealing sensitive dat...

CVE-2026-89618

A flaw was found in the Linux kernel's eventfs component. When the eventfscreatedir function fails due to memory pressure, an uninitialized internal data structure can cause the system to issue a misleading warning during the cleanup process. This incorrect error reporting could lead to confusion...

AZL-100491 CVE-2026-89749 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

DEBIAN-CVE-2026-89618

In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-children and ei-list in initei eventfscreatedir allocates the eventfsinode and initializes it with initei. But this does not initialize the eventfsinode listheads. If the eventfscreatedir fails due to memor...

CVE-2026-89618

In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-children and ei-list in initei eventfscreatedir allocates the eventfsinode and initializes it with initei. But this does not initialize the eventfsinode listheads. If the eventfscreatedir fails due to memor...

DEBIAN-CVE-2026-89547

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svccreate initializes three per-pool percpucounter stats and ignores every return value. On SMP, percpucounterinit fails when allocpercpugfp cannot satisfy the allocation, leaving...

AZL-100094 CVE-2026-89511 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add buildskb support...

DEBIAN-CVE-2026-89511

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add buildskb support...

CVE-2026-89511

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add buildskb support...

DEBIAN-CVE-2026-89483

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...