CVE-2026-89473: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix powersupply reference leak bq25890fwprobe acquires a reference to a secondary charger using powersupplygetbyname, but the reference is not released on later probe failures or on driver detach. In...

PT-2026-90423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the nfsd cross mnt function when follow down returns a negative value. The function initializes a local path structure using mntget and dget, but fails to call...

PT-2026-90361

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs component during relocation recovery where fs roots maintain references to their relocation roots even after a recovery failure. Specifically, if loading a...

CVE-2026-89512: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a...

PT-2026-90163

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd access notify unmap function where internal accesses are skipped because they lack an external unmap callback. The process incorrectly calls iommufd lock o...

PT-2026-90189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the bq25890 driver within the power supply subsystem. The bq25890 fw probe function acquires a reference to a secondary charger via power supply get by name, b...

PT-2026-90362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component of the Linux kernel where an inode reference is leaked during a writeback abort during unmount. The ceph dirty folio function creates a wrbuffer cla...

CVE-2026-89707: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

PT-2026-90162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommufd component where the iommufd take all iova rwsem function fails to properly release an object reference and the iova rwsem write lock when xa store fails...

PT-2026-90431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the NFS localio component when the nfs uuid add file function races with nfs uuid put during the teardown of uuid-net. In this scenario, the system returns...

PT-2026-90228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference leak occurs in the remoteproc scp component. The issue arises when attempting to look up driver data for the SCP device before the driver has been bound, as the...

PT-2026-90169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/amd component where PCI device references are leaked during the handling of PPR Page Request Interface faults. The iommu call iopf notifier function uses pci...

PT-2026-90306

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rocket job run function where error path handling is incorrect after a fence reference is taken for job-done fence via dma fence get. This leads to three specific...

PT-2026-96506

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a...

PT-2026-90397

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the nfsd component where the workqueue core clears WORK STRUCT PENDING before the callback is invoked. This causes delayed work pending in the lm breaker timedout...

SUSE CVE-2026-80888

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...

SUSE CVE-2026-80897

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

Linux Distros Unpatched Vulnerability : CVE-2026-80898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: clear PGprivate2 on copy-to-cache append failure netfspgpriv2copytocache marks the folio with PGprivate2 before netfspgpriv2copyfolio appends it to the...

Linux Distros Unpatched Vulnerability : CVE-2026-80821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053317 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: fix reference leak when pmruntimegetsync fails The PM reference count is not expected ...