CVE-2026-98586

A vulnerability exists in the Linux kernel SCTP implementation where the code calls mod_timer() before acquiring the necessary reference for a rearmed timer without holding the sock lock . This creates a race condition during timer cleanup: if a timer is deleted after mod_timer() returns but befo...

EUVD-2026-103631

In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...

CVE-2026-98586

In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before modtimer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls modtimer before taking the reference needed by the...

CVE-2026-98544

In the Linux kernel, the following vulnerability has been resolved: bna: prevent IOC timer rearm during teardown bna: prevent IOC timer rearm during teardown bnadpciremove and the probe disableioceth path call timerdeletesync for ioctimer, semtimer and hbtimer, but not for iocpftimer...

PT-2026-116763

In the Linux kernel, the following vulnerability has been resolved: bna: prevent IOC timer rearm during teardown bna: prevent IOC timer rearm during teardown bnad pci remove and the probe disable ioceth path call timer delete sync for ioc timer, sem timer and hb timer, but not for iocpf timer. bn...

CVE-2026-98707: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: shut down RX BA session timer on teardown Tearing down an RX BA session can leave the session timer queued on a freed tidrx. Later timer-wheel processing and the timer callback itself then run against freed memory...

CVE-2026-98762: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2wakeupdetected accesses the DWC2 host state and can rearm the wakeup timer. dwc2hcdfree currently deletes the timer only after freeing host-owned state, and timerdele...

CVE-2026-98749: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100shutdown stops the polling timer but returns early during system suspend. If the SPI device is unbound before resume, the serial core does not call max3100shutdown...

PT-2026-116926

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: shut down RX BA session timer on teardown Tearing down an RX BA session can leave the session timer queued on a freed tid rx. Later timer-wheel processing and the timer callback itself then run against freed memor...

PT-2026-116968

In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100 shutdown stops the polling timer but returns early during system suspend. If the SPI device is unbound before resume, the serial core does not call max3100 shutdow...

PT-2026-116981

In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2 wakeup detected accesses the DWC2 host state and can rearm the wakeup timer. dwc2 hcd free currently deletes the timer only after freeing host-owned state, and timer...

Linux Distros Unpatched Vulnerability : CVE-2026-98762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: dwc2: shut down wakeup timer before freeing HCD state dwc2wakeupdetected accesses the DWC2 host state and can rearm the wakeup timer. dwc2hcdfree currently...

PT-2026-116805

In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before mod timer in timer handlers Take the association or transport reference before rearming a timer in the timer handlers. The existing code calls mod timer before taking the reference needed by th...

Linux Distros Unpatched Vulnerability : CVE-2026-98707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: shut down RX BA session timer on teardown Tearing down an RX BA session can leave the session timer queued on a freed tidrx. Later timer-wheel...

Linux Distros Unpatched Vulnerability : CVE-2026-98749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: max3100: shut down timer before freeing port max3100shutdown stops the polling timer but returns early during system suspend. If the SPI device is...

PT-2026-117078

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mt remove quiesces the sticky-finger timer before stopping the hardware: timer delete sync&td-release timer; sysfs remove group&hdev-dev.kobj, &mt attribute...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.30 contains a security vulnerability. This vulnerability arises from the max3100 serial port driver returning values prematurely when the system is suspended. The polling timer is not closed before releasing the port. When the SPI device unlinks before it recovers, it...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.36 has a security vulnerability. This vulnerability arises from the fact that the session timer is not stopped when a RX BA session is terminated. As a result, the timer may continue to queue on the released tidrx, and the expiration handler can re-activate the timer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains a security vulnerability. This vulnerability stems from the HID multitouch driver, which does not prevent the timer from being re-activated when it is removed, allowing for reuse after release...

CVE-2026-98410

A flaw was found in the Linux kernel's DA9063 watchdog driver. When a system suspends while the hardware watchdog timer is running without active user-space management, the driver fails to disable the timer. Consequently, the timer continues to run and can expire while the system is suspended,...