CVE-2026-90211

CVE-2026-90211 affects the Linux kernel on the s390x architecture. The vulnerability resides in the BPF JIT compiler's handling of read-modify-write (RMW) atomics on arena pointers. Specifically, bpf_jit_probe_atomic_pre() leaves probe->reg at -1 (the sentinel from bpf_jit_probe_init()), so wh...

CVE-2026-90211 bpf, s390: Clear fetch destination on faulting arena atomic

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...

EUVD-2026-81804

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...

CVE-2026-90211: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...

Exploit for CVE-2026-12793

CVE-2026-12793 — JetFormBuilder Unauthenticated Privilege Esca...

AZL-101280 CVE-2026-89903 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...

DEBIAN-CVE-2026-89903

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...

DEBIAN-CVE-2026-89905

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional arena register slot above the tail call counter context. When arenavmstart is dynamically enabled, it shifts the relative...

DEBIAN-CVE-2026-89869

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an already queued threaded IRQ handler to complete before returning. As a...

EUVD-2026-80505

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional arena register slot above the tail call counter context. When arenavmstart is dynamically enabled, it shifts the relative...

CVE-2026-89905 LoongArch: BPF: Move arena register slot below TCC context

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional arena register slot above the tail call counter context. When arenavmstart is dynamically enabled, it shifts the relative...

CVE-2026-89903 LoongArch: Do not save/restore percpu base register in rethook trampoline

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...

CVE-2026-89903

CVE-2026-89903 affects the Linux kernel on the LoongArch architecture, specifically the rethook trampoline (previously the kretprobe trampoline since v6.3 ). The trampoline incorrectly saves and restores $r21 (the per-CPU base register) across its entry/exit frame. If a task migrates CPUs between...

SUSE CVE-2026-89581

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

TencentOS Server 4: libpcap (TSSA-2026:1013)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1013 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-93390

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.12 Description In the SUNRPC component, the functions rpcb register inet4 and rpcb register inet6 fail to check the return value of rpc sockaddr2uaddr before storing it in map-r addr. When rpc sockaddr2uaddr returns NULL...

PT-2026-93524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunxi-cir media remote control rc component where the system fails to unregister the rc device during a probe failure. When rc register device succeeds but...

PT-2026-93588

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0-rc5 Description An out-of-bounds read occurs in the Linux kernel due to a mismatch between the actual number of parents and the hard-coded num parents field in the gxbb 32k clk sel mux. This issue was triggered when ...

Linux Distros Unpatched Vulnerability : CVE-2026-89945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: cs35l34: drain threaded IRQ before runtime suspend cs35l34runtimesuspend currently switches the codec into regcachecacheonlytrue, asserts reset low, and...

CVE-2026-89903: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Inbetween rethooktrampolinehandler may schedule vi...