CVE-2026-90084 octeontx2-vf: fix workqueue and netdev race in probe/remove

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add...

PT-2026-94529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ublk shmem remove ranges function where a teardown retry loop can occur due to an xarray allocation failure. The function attempts to store ranges into a temporary...

PT-2026-94769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the PCI subsystem. This occurs when a probe runs concurrently with the removal of dynamic IDs, as the remove id store function can free the node whil...

PT-2026-94965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the zynqmp dma remove function between runtime Power Management PM and device removal. The issue occurs because runtime PM is disabled only after the system...

PT-2026-94721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 remove interface function where the wcid mask bit is cleared without a lock and before the RCU wcid pointer is cleared. Because the mask is a non-atomic...

PT-2026-94981

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC rt700-sdw component where the rt700 sdw remove function only drains jack detect work and jack btn check work if the rt700-hw init state bit is true. Because...

PT-2026-94404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net: fec component where the fec ptp stop function is called unconditionally during device removal in fec drv remove and on the failed initialization path in fec...

PT-2026-94475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio RTC implementation where alarm requests wait indefinitely for the device to return requestq buffers while the rtc device.ops lock is held. During a surprise...

AZL-101252 CVE-2026-89797 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500fg: fix use-after-free on remove ab8500fgremove destroys the driver workqueue while the threaded interrupt handlers are still armed; they are devm-managed and freed only after -remove returns, so a handler th...

CVE-2026-89997

CVE-2026-89997 affects the Linux kernel device-mapper (dm) subsystem . A race condition occurs when the resume and remove ioctls are issued simultaneously: the device may be resumed after being suspended in __dm_destroy, causing the table to be destroyed without invoking the postsuspend method. S...

SUSE CVE-2026-89475

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...

PT-2026-93600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio ap config remove function where the bitmap andnot function is used to clear bits from the matrix mdev-matrix.adm bitmap, which specifies the control domains...

PT-2026-93438

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ab8500 fg remove function. The driver destroys the workqueue while threaded interrupt handlers remain armed. Because these handlers are devm-managed...

PT-2026-93531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the go7007 media driver. The go7007 snd remove function releases the v4l2 device reference too early when a userspace process still has the capture PCM...

PT-2026-93351

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A low-privileged remote attacker with operator credentials can execute commands with root privileges on the device. This is possible through a command injection...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38412)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delWiFiAclRules function. Attackers can exploit this vulnerability by sending a specially crafted POST...

CVE-2026-89997: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at the same time, it may be possible that the device is resumed after it is suspended in dmdestroy. The result is that the table is destroyed...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iavf: Fixed an out-of-bounds situation when setting channels during iavfremove. If the channels are set to a value greater than what is actually allocated, it will cause a timeout, and an error will be returned. However, the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: arm64: probes: Removed the broken LDR literal uprobe support. The simulateldrliteral and simulateldrswliteral functions are unsafe to use for uprobes. Both functions were originally designed for use with kprobes, and accessed...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: rcarfdp1: Fixed a reference count leak in the probe and remove functions. rcarfcpget takes a reference, which should be balanced with rcarfcpput. Added the missing rcarfcpput function in fdp1remove, and corrected the error...