EUVD-2026-82105

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in findposandways error path The error path releases its reference to a switch decoder before logging an error that includes the decoder name. If the released reference is the last one, the decoder...

CVE-2026-92484 cxl/region: Fix use-after-free in find_pos_and_ways() error path

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in findposandways error path The error path releases its reference to a switch decoder before logging an error that includes the decoder name. If the released reference is the last one, the decoder...

CVE-2026-92484: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in findposandways error path The error path releases its reference to a switch decoder before logging an error that includes the decoder name. If the released reference is the last one, the decoder...

PT-2026-94792

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the find pos and ways function within the cxl/region component. The error path releases a reference to a switch decoder before logging an error message...

AZL-101661 CVE-2026-89801 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

CVE-2026-89801

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

CVE-2026-90004 mm/damon/core: handle region split failure in apply_min_nr_regions()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions repeatedly split each region until its size becomes small enough to meet the user-defined low limit of the number of regions. The loop assumes...

EUVD-2026-80554

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image information regioncount to walk entries from a fixed local array. Th...

CVE-2026-89801

CVE-2026-89801 is a vulnerability in the Linux kernel 's drm/nouveau/uvmm subsystem. The root cause is in nouveau_uvmm_bind_job_submit()'s OP_UNMAP_SPARSE handling: two failure paths (a -ENOENT busy-region check and a drm_gpuvm_sm_unmap_ops_create() failure) leave op->reg set, violating the do...

PT-2026-93645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the damon apply min nr regions function where the system repeatedly splits regions to meet a user-defined minimum limit. The process relies on the damon split region a...

PT-2026-93441

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/nouveau/uvmm component where the dirty flag is not cleared when unwinding an OP UNMAP SPARSE operation. When a subsequent operation in a job fails, the unwind...

PT-2026-93549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch KVM implementation where the kvm arch prepare memory region function fails to preserve architecture-specific flags during a KVM MR FLAGS ONLY update...

Linux Distros Unpatched Vulnerability : CVE-2026-89954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image...

Linux Distros Unpatched Vulnerability : CVE-2026-90004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions...

Linux Distros Unpatched Vulnerability : CVE-2026-89801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fixed NULL pointer dereferencing in the error path When calling mlxswspacltcamregiondestroy from an error path after failing to attach the region to an ACL group, we encountered a NULL pointer dereferencin...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Added bounds checking to mienumattr. Bounds checking was added to ensure that no attribute stray beyond the valid memory region...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: – The faulty behavior of the mm:resolvefaultymmapregion function has been fixed. The mmapregion function is quite problematic, with a confusing control flow and numerous ways in which issues can arise. This leads to incomplete...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fixed incorrect variable used when calling devmrequestmemregion The rcarpcieparseoutboundranges function uses the devmrequestmemregion macro to request a required resource. A string variable located on the stack is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: ipset: Fixed issues related to region locking in hash types. The region locking mechanism introduced in v5.6-rc4 included three macros for handling region locks: ahashbucketstart, ahashbucketend which return the sta...