CVE-2026-64343

CVE-2026-64343 is a use-after-free in the Linux kernel's USB ldusb driver triggered by a race between release() and disconnect(). The root cause is that mutex_unlock() is non-atomic and may access the mutex structure after the lock is released, making it unsuitable for managing object lifetime di...

The vulnerability of the geode_rng_init() function in the drivers/char/hw_random/geode-rng.c module of the Linux operating system’s character device driver framework allows a attacker to cause a service failure.

The vulnerability of the geodernginit function in the drivers/char/hwrandom/geode-rng.c file of the Linux kernel’s alphabetic devices driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __iov_iter_get_pages_alloc() function in the lib/iov_iter.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the iovitergetpagesalloc function in the lib/ioviter.c module of the Linux operating system’s kernel is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the jbd2_fc_wait_bufs() function in the fs/jbd2/journal.c file of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the jbd2fcwaitbufs function in the fs/jbd2/journal.c file of the Linux kernel file system is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_prog_attach() function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the bpfprogattach function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to trigger a servic...

CVE-2026-46233

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadvblapurgeclaims goes through the list of claims, it is only traversing the hash list with an rcureadlock. Due to a potential parallel batadvclaimput, it can happen that it...

CVE-2026-46233

CVE-2026-46233 affects the Linux kernel batman-adv component (batadv_bla_purge_claims). The issue arises when iterating the claims list with an rcu_read_lock() and encountering a claim being released, potentially setting backbone_gw to NULL before the delayed kfree, making batadv_bla_claim_get_ba...

CVE-2026-46233 batman-adv: bla: only purge non-released claims

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadvblapurgeclaims goes through the list of claims, it is only traversing the hash list with an rcureadlock. Due to a potential parallel batadvclaimput, it can happen that it...

The vulnerability of the perf_pending_task_sync() function in the kernel/events/core.c module, which manages kernel-level events in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the perfpendingtasksync function in the kernel/events/core.c module, which handles kernel events in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.

The vulnerability of the ofgetdrtimings function in the drivers/memory/ofmemory.c module of the Linux kernel’s memory driver library is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ti_sci_intr_irq_domain_probe() function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux operating system’s IRQ chip driver module allows a attacker to cause a service failure.

The vulnerability of the tisciintrirqdomainprobe function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the batch_clear_carry() function in the drivers/iommu/iommufd/pages.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the batchclearcarry function in the drivers/iommu/iommufd/pages.c file of the Linux kernel’s IOMMU driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011224 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev Do not assing the Linux device to struct...

The vulnerability of the pdata_quirks_init_clocks() function in the arch/arm/mach-omap2/pdata-quirks.c module, which is part of the ARM platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the pdataquirksinitclocks function in the arch/arm/mach-omap2/pdata-quirks.c module, which is part of the ARM platform support for the Linux operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacke...

ROS-20260407-73-0022

A vulnerability in the netfilter component of the Linux operating system kernel is related to errors in updating the reference counter. Exploitation of the vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause a denial-of-service condition...

The vulnerability of the p9_read_work() function in the net/9p/trans_fd.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the p9readwork function in the net/9p/transfd.c module of the Linux kernel is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the BPF_CALL_3() function in the net/core/filter.c module allows a hacker to trigger a service failure. This vulnerability is related to the support for kernel network functions in the Linux operating system.

The vulnerability of the BPFCALL3 function in the net/core/filter.c module related to Linux kernel network functions is associated with errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the erdma_mmap() function in the drivers/infiniband/hw/erdma/erdma_verbs.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the erdmammap function in the drivers/infiniband/hw/erdma/erdmaverbs.c file of the Linux operating system’s kernel driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow a remote attacker to cause service interruptio...

The vulnerability of the hns_roce_mmap() function in the drivers/infiniband/hw/hns/hns_roce_main.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the hnsrocemmap function in the drivers/infiniband/hw/hns/hnsrocemain.c file of the Linux operating system’s kernel driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the `ibmebus_bus_init()` function in the `arch/powerpc/platforms/pseries/ibmebus.c` module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the ibmebusbusinit function in the arch/powerpc/platforms/pseries/ibmebus.c file, which is part of the Linux operating system’s PowerPC platform support module, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an...