EulerOS Virtualization 2.12.1 : libssh2 (EulerOS-SA-2026-3594)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the...

AZL-102917 CVE-2026-93128 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...

AZL-102279 CVE-2026-93117 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the node. Thus, make a copy in usbprobeinterface. Clarify the documentati...

AZL-102111 CVE-2026-90389 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: md: scope memallocnoio to allocation critical sections Storing a memallocnoiosave token in mddev-noioflags lets one task save the token and another task restore it. With concurrent suspend sysfs writes, task A can enter...

CVE-2026-93128

CVE-2026-93128 affects the platform/x86 lg-laptop driver in the Linux kernel . The event notification callback may access the kbd_backlight LED device even when it was not successfully registered with the LED subsystem, and acpi_remove() unconditionally unregisters LED devices. The fix tracks the...

PT-2026-94677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID subsystem. The hid device io start function allows reports to run concurrently with the probe process. If the probe fails, the hid device probe...

PT-2026-94559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem on s390 architecture where a Read-Modify-Write RMW atomic operation on an arena pointer fails to clear the destination register during a fault over a...

PT-2026-94921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check kfunc args function fails to bound kfunc arguments named rdonly buf size or rdwr buf size. These values are stored in meta-r0 size a...

PT-2026-94545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID haptic subsystem where the fill effect buf function initializes values only for four specific haptic usages. However, it writes these values to field-value for...

PT-2026-94690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the BPF subsystem when the arena vm fault function fails to acquire the arena-spinlock. The function returns VM FAULT RETRY, which triggers the do user addr fault pa...

PT-2026-94907

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where tracing multi trampolines are not marked as ftrace managed. This occurs because the tracing multi link fails to set the...

PT-2026-94565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to properly compare iterator types during state pruning. Specifically, iterator stack slots can be...

PT-2026-94924

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lg-laptop platform driver for x86 architectures regarding LED resource handling. The event notification callback may attempt to access kbd backlight even if it was...

PT-2026-94970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where per-CPU map elements are stored using a rounded size, but the copy map value long function passes only the map-value size to bpf obj memcpy. Wh...

PT-2026-94793

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the trampoline could be corrupted due to the incorrect assignment of tr-flags in the verifier. When a fexit is attached to a tail call reachabl...

PT-2026-94572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the NFC NCI subsystem where nci close device and nci rx work can concurrently call the nci data exchange complete function. This occurs because rx work is no...

CVE-2026-93128: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...

PT-2026-94660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check atomic load function calls check load mem before atomic ptr type ok. In scenarios where a load-acquire operation fetches data into it...

PT-2026-94682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the tty subsystem. The tty cdev add function drops the cdev reference when cdev add fails, but fails to clear the driver-cdevsindex pointer, leaving it...

PT-2026-94769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the PCI subsystem. This occurs when a probe runs concurrently with the removal of dynamic IDs, as the remove id store function can free the node whil...