CVE-2026-99161

A flaw was found in the Linux kernel's VIA/Wondermedia I2C driver. The driver fails to properly release clock resources if an initialization error occurs or when the driver is unloaded. A local user could exploit this flaw to cause an unreleased reference count leak, potentially leading to resour...

CVE-2026-99019

A flaw was found in the Linux kernel's SCSI changer driver, which can lead to a Denial of Service DoS. The driver retains unreleased device references after reading changer configuration data, preventing removed devices from being properly cleaned up. An attacker or local user interacting with SC...

Security Bulletin:Vulnerability in netty-codec-haproxy may affect IBM Infosphere Change Data Capture (CVE-2026-93564)

Summary A security vulnerability has been identified in netty-codec-haproxy, Netty/Codec/HAProxy. netty-codec-haproxy is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

CVE-2026-98498

A flaw was found in the Linux kernel's mlx5 network driver. When handling shared connection tracking counters, the driver fails to properly release an entry's reference count if the associated counter is in the process of being released. This reference count leak prevents the reverse entry from...

CVE-2026-98552

A flaw was found in the Linux kernel's Performance Counters for Linux perf subsystem. A race condition during the attachment of performance monitoring context data can cause the kernel to fail to update tracking flags, resulting in a reference count leak. A local attacker could exploit this...

Linux Distros Unpatched Vulnerability : CVE-2026-98535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and...

CVE-2026-98458

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS through a reference count leak during Bluetooth Isochronous ISO channel attachment. When a socket attempts to attach to a channel that is already connected or in use by another socket, t...

SUSE CVE-2026-98535

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and never calls clkput. The clock is not stored anywhere, so the referen...

DEBIAN-CVE-2026-98535

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and never calls clkput. The clock is not stored anywhere, so the referen...

AZL-109089 CVE-2026-98535 affecting package kernel for versions less than 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and never calls clkput. The clock is not stored anywhere, so the referen...

UBUNTU-CVE-2026-98535

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and never calls clkput. The clock is not stored anywhere, so the referen...

CVE-2026-98535

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and never calls clkput. The clock is not stored anywhere, so the referen...

CVE-2026-98535: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and never calls clkput. The clock is not stored anywhere, so the referen...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the attachperfctxdata function in perf/core when the global and !global conditions are involved. This race condition may lead to a leak of the reference count if th...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: fix refcount leak on error path When failing to allocate reportdesc, opts-refcnt has already been incremented; therefore, it needs to be decremented to prevent the options structure from being permanently locke...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: gpio: sifive: Fix the refcount leak in sifivegpioprobe. The function ofirqfindparent returns a node pointer with the refcount incremented. We should use ofnodeput on it when it is no longer needed. Add ofnodeput to avoid the...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in xfrmpolicycheck The issue occurs in an error path within xfrmpolicycheck. When the fetching process of the object pols1 fails, the function simply returns 0, failing to decrement the reference count of...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fprinter: Only use kref for successful opening of the character device. The printeropen function returns -EBUSY when the character device is already open. However, it increments the dev-kref regardless of the return...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As stated in the comment of pcigetdomainbusandslot, it returns a PCI device with a refcount incremented. Upon use, the caller must decrement the reference count by calling pcidevput. In...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...