UBUNTU-CVE-2026-23454

In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in manahwcdestroychannel by reordering teardown A potential race condition exists in manahwcdestroychannel where hwc-callerctx is freed before the HWC's Completion Queue CQ and Event Queue EQ are...

CVE-2026-23469 drm/imagination: Synchronize interrupts before suspending the GPU

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Synchronize interrupts before suspending the GPU The runtime PM suspend callback doesn't know whether the IRQ handler is in progress on a different CPU core and doesn't wait for it to finish. Depending on timing,...

CVE-2026-23450

CVE-2026-23450 (Linux kernel): The issue stems from a race in the SMC TCP path (net/smc) where, during close of an SMC listen socket, sk_user_data can be NULL or the smc_sock freed, causing a NULL dereference or use-after-free in smc_tcp_syn_recv_sock() when accessed under rcu/protected context. ...

CVE-2026-23450

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smctcpsynrecvsock Syzkaller reported a panic in smctcpsynrecvsock 1. smctcpsynrecvsock is called in the TCP receive path softirq via icskafops-synrecvsock on the clcsock TCP listening...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of interrupt synchronization and could lead to kernel crashes...

PT-2026-34945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM component regarding SEV Secure Encrypted Virtualization. The system fails to reject attempts to synchronize the vCPU state to its associated VMSA Virtual Machi...

ROS-20260403-73-0023

A vulnerability in the mm/ptdump component of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260403-73-0024

A vulnerability in the hvnetvsc component of the Linux operating system kernel is related to a lack of synchronization. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the xdma_channel_isr() function in the drivers/dma/xilinx/xdma.c module of the Linux kernel’s DMA driver support allows a attacker to cause a service failure.

The vulnerability of the xdmachannelisr function in the drivers/dma/xilinx/xdma.c file of the Linux kernel’s DMA driver support module is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the unix_stream_sendpage() function in the net/unix/af_unix.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the unixstreamsendpage function in the net/unix/afunix.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the btrfs_cancel_balance() function in the fs/btrfs/volumes.c module of the Linux file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfscancelbalance function in the fs/btrfs/volumes.c file of the Linux kernel’s file system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-30163

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.7-B2C-00005-g9c7bbe4ea16c Description The Linux kernel contained a flaw in the drm/imagination subsystem related to interrupt handling during GPU suspension. The runtime power management suspend callback did...

CVE-2026-33544: Concurrent Execution using Shared Resource with Improper Synchronization

Tinyauth is an authentication and authorization server. Prior to version 5.0.5, all three OAuth service implementations GenericOAuthService, GithubOAuthService, GoogleOAuthService store PKCE verifiers and access tokens as mutable struct fields on singleton instances shared across all concurrent...

The vulnerability of the z_erofs_get_gbuf() function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support for the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the zerofsgetgbuf function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the make_uffdwppte() function in the fs/proc/task_mmu.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the amdgpu_vram_mgr_new() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI (Direct Rendering Infrastructure) kernels.

The vulnerability of the amdgpuvrammgrnew function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module related to AMD GPU cores in Linux operating systems is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability of the unregister_fprobe() function in the kernel/trace/fprobe.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the unregisterfprobe function in the kernel/trace/fprobe.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __hw_perf_event_init() function in the arch/s390/kernel/perf_cpum_sf.c module, which is part of the S390 platform support for the Linux operating system, allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the hwperfeventinit function in the arch/s390/kernel/perfcpumsf.c module, which is part of the S390 platform support for the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to access...

The vulnerability of the codetag_unload_module() function in the lib/codetag.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the codetagunloadmodule function in the lib/codetag.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mlx5r_umr_cleanup() function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support driver allows a malicious actor to cause a service failure.

The vulnerability of the mlx5rumrcleanup function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...