CVE-2026-93223

A flaw was found in the Linux kernel's Tegra video driver, which can lead to a Denial of Service DoS. When parsing video input channels, the driver improperly drops an object reference during error handling without having previously acquired it. A local user could exploit this vulnerability by...

CVE-2026-98983

A flaw was found in the Linux kernel. During a failed namespace unshare operation, the kernel improperly decrements reference counters for namespaces that were never fully established. A local attacker could exploit this flaw by triggering specific credential allocation failures, leading to...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.11. It arises because after obtaining a clock via ofclkget in the wmti2cprobe function, the clock is not released using clkput during subsequent operations or module unloading. This results in a leak of clock reference counts...

Security Bulletin:Vulnerability in netty-codec-haproxy may affect IBM Infosphere Change Data Capture (CVE-2026-93564)

Summary A security vulnerability has been identified in netty-codec-haproxy, Netty/Codec/HAProxy. netty-codec-haproxy is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises when threads exit via BINDERTHREADEXIT, causing pending work items to be canceled. This results in a loss of node reference count updates, leading to asynchronous updates between node delivery status and count status...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.0.2 through 4.1. It arises because clonemnt fails to disable MNTUMOUNT when copying mount flags; as a result, delayed unmounts still retain their mount flags after being copied. This can lead to reference count errors, mount point leaks,...

PT-2026-122155

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The ra...

Direct Rendering Manager DoS

The vulnerability of the Direct Rendering Manager DRM subsystem in the Linux operating system is related to the dereferencing of a pointer with an expired reference count. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CVE-2026-98498

A flaw was found in the Linux kernel's mlx5 network driver. When handling shared connection tracking counters, the driver fails to properly release an entry's reference count if the associated counter is in the process of being released. This reference count leak prevents the reverse entry from...

CVE-2026-93106

A flaw was found in the Linux kernel's crashdump functionality, specifically in how it handles dm-crypt keys. When multiple dm-crypt keys are restored, a reference to the user keyring is incorrectly dropped multiple times. This can lead to a reference count underflow or a use-after-free condition...

CVE-2026-98552

A flaw was found in the Linux kernel's Performance Counters for Linux perf subsystem. A race condition during the attachment of performance monitoring context data can cause the kernel to fail to update tracking flags, resulting in a reference count leak. A local attacker could exploit this...

Linux Distros Unpatched Vulnerability : CVE-2026-98535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsl/fman: Fix clk reference leak in readdtsnode ofclkget returns a clock with its reference count incremented, but readdtsnode only uses it to read the rate and...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23291)

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the device is disconnected from the driver, there is a 'dangling' reference count on the usb interface that was grabbed in the probe callback. Fix this up b...

CVE-2026-98458

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS through a reference count leak during Bluetooth Isochronous ISO channel attachment. When a socket attempts to attach to a channel that is already connected or in use by another socket, t...

CVE-2026-98527

A flaw was found in the Linux kernel's Zynq General Purpose Input/Output GPIO driver. A local user could cause a Denial of Service DoS when requesting a GPIO line fails due to improper reference count handling in the runtime power management subsystem. The error path fails to decrement the usage...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futexlockpi retry path Fuzzying/stressing futexes triggered: WARNING: kernel/futex/core.c:825 at waitforownerexiting+0x7a/0x80, CPU11: futexlockpis/524 When futexlockpiatomic sees that the...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There’s a bug in dm-thin within the rebalancechildren function. If an internal btree node contains only one entry, the code attempts to copy all btree entries from its children to the node...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix reference count leak in rxrpcserverkeyring This patch fixes a reference count leak in rxrpcserverkeyring by checking whether rx-securities is already set...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drbd: fixed “LOGIC BUG” in drbdalbeginiononblock Although we verify that we should be able to perform lcgetcumulative while holding the device-allock spinlock, it may still fail if another code path decides to use lctrylock at an...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pmruntimeputautosuspend before the error check to ensure that the PM runtime reference count is always decremented after pmruntimegetsync, regardless of whether the read...