CVE-2026-89688: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a reference on the nfs4stid sccount but takes no reference on the stateowne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107319 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ...

PT-2026-90404

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the NFSv4 server. In the nfs4 preprocess seqid op function, the stateid is obtained via nfsd4 lookup stateid, which increments the sc count reference on the nf...

PT-2026-90471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the migrate device pages function where the folio mapping is read before calling folio free swap. If folio free swap succeeds, the folio is removed from the swap cache...

PT-2026-96443

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl used against rl count in refcount block validator ocfs2 find refcount rec in rl walks the on-disk refcount record array with: for ; i rf records.rl used; i++ rec = &rb-rf records.rl recsi; ... rl recs lives in ...

CVE-2026-89544: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssxdecoptionarray error path bugs Four coupled defects in the gssx XDR option-array decoder make the error paths unsafe: a NULL deref in the caller, a refcount leak on the decoded groupinfo, and a latent use-after-fr...

PT-2026-90209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 component of the Linux kernel where the ocfs2 validate refcount block function fails to validate the rl used and rl count variables against the actual on-dis...

PT-2026-90113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A socket reference count leak exists in the smc switch conns function. The issue occurs when the function takes a reference on the SMC socket but fails to call the corresponding sock put...

MiracleLinux 9 : kernel-5.14.0-687.31.1.el9_8 (AXSA:2026-1793:76)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1793:76 advisory. kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop...

kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove

A flaw was found in the Linux kernel's qrtr network subsystem. A race condition exists in the qrtrportremove function where the socket reference count is decremented prematurely. This allows a concurrent reader to access a socket whose reference count has dropped to zero, potentially leading to a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053251 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to...

Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-085343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085343 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svcxprtput on rpccreate failure On error situation...

CVE-2026-80897 netfs: release readahead folios on iterator preparation failure

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

AZL-99678 CVE-2026-80808 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...

CVE-2026-80808 ext4: stop retrying saturated xattr cache entries

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...

SUSE CVE-2026-74631

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splicetopipe may drop...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105438 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refc...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105429 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: tegra20: Fix refcount leak in tegra20clockinit offindmatchingnode returns a node pointer wit...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105430 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: tegra: Fix refcount leak in tegra210clockinit offindmatchingnode returns a node pointer with...

SUSE CVE-2026-74347

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nfcttimeout which is used by ct extension to set the custom ct timeout policy, this tells us that the ct timeout is being used...