3 matches found
CVE-2026-89709
In the Linux kernel , the lockd and nfsd subsystems contain a race condition in the dispatch of the nlmsvc_ops pointer. The pointer is published by nfsd_lockd_init() and cleared by nfsd_lockd_shutdown() using plain stores, while lockd dereferences it unguarded from dispatch sites in fs/lockd/svcs...
CVE-2026-74666 packet: synchronize pressure clearing with ring reconfiguration
In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock, but used to publish the tpacket receive mode through po-prothook.func after releasing that lock...
AZL-96378 CVE-2026-74490 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints dump queue state through tipcskdump. Most queue-dump callsites already serialize that walk under the socket lock or sk-sklock.slock, but tipcpoll calls...