UBUNTU-CVE-2026-93238

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

UBUNTU-CVE-2026-93242

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

UBUNTU-CVE-2026-93205

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

EUVD-2026-86248

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-93242 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-93242

The Linux kernel contains a vulnerability in the scsi: qla2xxx driver related to response queue over-consumption in the __qla_consume_iocb() function. Specifically, qla24xx_process_response_queue() advances the ring_ptr past the head IOCB before dispatching; however, __qla_consume_iocb() loops pu...

CVE-2026-93242

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-93242 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-93238 s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

EUVD-2026-86244

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

CVE-2026-93205

The Linux kernel contains a vulnerability in the iommu/arm-smmu-v3 component due to an incorrect cleanup order during device removal. Specifically, arm_smmu_device_remove() manually frees the IOPF queue and destroys the vmid_map while IRQs and queues are managed by devm . Because devm unwinds onl...

CVE-2026-93205 iommu/arm-smmu-v3: Manage teardown with devm

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

CVE-2026-84302: Missing Authorization

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with private messages could appear in the moderator review queue of a moderator who was not a participant in the message. Reviewable visibility filtering did n...

PT-2026-98116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the allocate sdma queue function fails to perform bounds-checking on the restore sdma id variable. This variable, which allows the...

CVE-2026-93238: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

CVE-2026-93238

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

PT-2026-98146

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description AI reviewables associated with private messages may appear in the moderator review...

PT-2026-97872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3 component where the arm smmu device remove function manually frees the IOPF queue, destroys the vmid map, and disables the device. Because the IR...

PT-2026-97935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where the kernel may be tainted due to an unexpected warning during driver unbind. When a device is wedged in mode 2 UPON ANY HANG NO RESET, a GSC...

PT-2026-98063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF race condition exists in the drm/amdkfd component. The wait on destroy queue function drops locks while waiting for a queue to resume, which allows a concurrent...