UBUNTU-CVE-2026-97536

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

UBUNTU-CVE-2026-98112

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthreadstop, so the taskstruct can be freed before...

UBUNTU-CVE-2026-98115

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

CVE-2026-98115 ksmbd: safely drain sessions during logoff

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lo...

CVE-2026-97608

In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: unregister loggers before per-net teardown nflogsyslog and nfnetlinklog unregister their per-network namespace operations before unregistering their global logger backends. This leaves a window where a sysctl or...

CVE-2026-97536 scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

EUVD-2026-86844

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-97536

The Linux kernel contains a use-after-free vulnerability in the scsi: qla2xxx driver during queue teardown. The issue occurs because the qla2xxx_delete_qpair() function calls free_irq(), which does not cancel work already placed on the ha->wq workqueue. Consequently, a still-pending q_work may...

CVE-2026-97536 scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-97536

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

PT-2026-98777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where sessions are not safely drained during logoff. In SMB3 multichannel, requests for a single session can operate across multiple connections. The...

CVE-2026-97536: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

CVE-2026-97536

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq, &qpair-qwork. qladowork dereferences the qpair vha, rsp and takes...

PT-2026-98591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UFS file system where the ufs fill super function installs the sb-s root before loading cylinder group structures for writable mounts. If the ufs read cylinder...

Linux Distros Unpatched Vulnerability : CVE-2026-97536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxxmsixrspq schedules qladowork via queueworkha-wq,...

CVE-2026-98112

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthreadstop, so the taskstruct can be freed before...

PT-2026-98476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver during queue teardown. The response queue MSI-X handler qla2xxx msix rsp q schedules the qla do work function via queue workha-wq...

CVE-2026-93205

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

PT-2026-104986

In the Linux kernel, the following vulnerability has been resolved: pds core: quiesce DMA before freeing resources pdsc teardown frees DMA buffers but does not disable bus mastering, leaving the device able to perform DMA after the buffers are freed. This can lead to use-after-free if the device...

PT-2026-97972

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs component where f2fs gc kthread is allocated dynamically. This design can lead to race conditions during the teardown process, specifically involving the f2fs...