SUSE CVE-2026-98949

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

CVE-2026-99067

The Linux kernel contains a vulnerability in the btrfs filesystem related to the scrub functionality. Specifically, the scrub_print_warning_inode() function fails to drop the reference taken by btrfs_get_fs_root() when paths_from_inode() fails, causing a reference leak to the root every time path...

CVE-2026-99067

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix localroot reference leak in scrubprintwarninginode When pathsfrominode fails, scrubprintwarninginode jumps to err without dropping the reference taken by btrfsgetfsroot, leaking a reference to the root every tim...

EUVD-2026-108733

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix localroot reference leak in scrubprintwarninginode When pathsfrominode fails, scrubprintwarninginode jumps to err without dropping the reference taken by btrfsgetfsroot, leaking a reference to the root every tim...

CVE-2026-99067 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix localroot reference leak in scrubprintwarninginode When pathsfrominode fails, scrubprintwarninginode jumps to err without dropping the reference taken by btrfsgetfsroot, leaking a reference to the root every tim...

CVE-2026-98953

The Linux kernel contains a reference leak vulnerability within the devlink component. The issue occurs in devlink_rel_nested_in_notify_work_schedule() and the reschedule path of devlink_rel_nested_in_notify_work(), where the system takes a reference on the devlink_rel but fails to drop it if the...

CVE-2026-98953

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

EUVD-2026-108927

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

CVE-2026-98953 devlink: fix devlink_rel reference leak when notify work is pending

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

EUVD-2026-108923

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

CVE-2026-98949

The Linux kernel contains a vulnerability in the drm/imagination driver within the pvr_vm_gpuva_remap() function. When a map overlaps an existing mapping, the function incorrectly splits the mapping and fails to handle references and vm_bo links correctly. Specifically, it leaks one GEM reference...

CVE-2026-98949 drm/imagination: Fix reference and vm_bo handling in remap()

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

EUVD-2026-108869

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913

The Linux kernel contains a PTP device reference leak within the nicvf_probe() function of the thunderx driver. The issue occurs because cavium_ptp_get() acquires a reference to the PTP PCI device via pci_get_device(), but fails to release this reference if subsequent initialization steps fail. T...

CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

Citrix XenServer 8.4.x Page Reference Leak (CTX697170)

The version of Citrix XenServer installed on the remote host is 8.4.x. It is, therefore, affected by a vulnerability as referenced in the CTX697170 advisory: - The grant table cache-flush error path fails to drop a page reference, which may allow a privileged user in a guest VM to compromise or...

SUSE CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...

SUSE CVE-2026-98851

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: drop flowtable reference on init error path nftflowoffloadinit bumps the flowtable use count with nftuseinc before calling nfctnetnsget. When the latter fails, the error is returned as-is and the...

Fedora 44 : xen (2026-839be67202)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-839be67202 advisory. x86/AMD: ineffectual Zenbleed workaround XSA-515, CVE-2026-79608 x86: XPTI may break on huge-memory systems XSA-516, CVE-2026-79609 grant-table:...

SUSE CVE-2026-98781

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtkdrmbind When the device is not the mmsys master, mtkdrmbind returns early after taking a reference on the disp-mutex device via offinddevicebynode, without ever dropping it: mtkdrmunbin...