EUVD-2026-81922

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

CVE-2026-90061 netfilter: nf_tables: skip double clone set expressions on element insert

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

CVE-2026-90061 netfilter: nf_tables: skip double clone set expressions on element insert

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

CVE-2026-90061

This Linux kernel netfilter nf_tables vulnerability occurs in both the dynset and newsetelem code paths. When no override expressions are provided for a new set element, the kernel clones the existing set expressions twice —once for the template and again for the new element—leading to a referenc...

CVE-2026-93143: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pmruntime refcount leak in ipu7resume ipu7resume calls pmruntimegetsync before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without...

CVE-2026-93136: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation mhiepcreatedevice takes one device reference for the UL channel and another for the DL channel after allocating the transfer device. These references...

CVE-2026-90061: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip double clone set expressions on element insert Both the dynset and newsetelem path clone the existing set expressions when setting set element expressions if no override expressions are provided. This...

CVE-2026-93106: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crashdump: release keyring reference at the correct time restoredmcryptkeystothreadkeyring gets a reference to the user keyring before restoring the saved dm-crypt keys. The same keyring reference is then passed to addkeytokeyrin...

CVE-2026-93196: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtiopmem: refcount requests for token lifetime KASAN reports slab-use-after-free in wakeupcommon: BUG: KASAN: slab-use-after-free in wakeupcommon+0x114/0x160 Read of size 8 at addr ffff88810fdcb710 by task swapper/0/0...

RLSA-2026:67471 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tls: Use skdstget and dstdevrcu in getnetdevforsock CVE-2025-40149 kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset...

AZL-101238 CVE-2026-89944 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...

DEBIAN-CVE-2026-89944

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...

CVE-2026-89944

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...

CVE-2026-89944 ASoC: hdac_hda: Fix hlink refcount leak on component registration failure

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...

CVE-2026-89944

CVE-2026-89944 is a reference-count leak in the Linux kernel's ASoC hdac_hda driver. In hdac_hda_dev_probe(), an HDA link reference is acquired via snd_hdac_ext_bus_link_get() before registering the ASoC component. If component registration fails, the function returns without calling snd_hdac_ext...

EUVD-2026-80544

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...

CVE-2026-89944 ASoC: hdac_hda: Fix hlink refcount leak on component registration failure

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...

CVE-2026-89936 iio: dac: m62332: Fix regulator reference count imbalance

In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332setvalue enables the Vcc regulator on every write of a non-zero value and disables it on every write of zero, without tracking the channel's current state. Because t...

DEBIAN-CVE-2026-89774

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in scoconnready sk deref in scoconnready must be done either under conn-lock, or holding a refcount, to avoid concurrent close. conn-sk and parent sk is currently accessed without either, and...

CVE-2026-89774

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in scoconnready sk deref in scoconnready must be done either under conn-lock, or holding a refcount, to avoid concurrent close. conn-sk and parent sk is currently accessed without either, and...