CVE-2026-98160

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData in rtwsdioif1init padapter-HalData is allocated via vzalloc, but incorrectly freed using kfree in the rtwsdioif1init error path. Using kfree to release this vmalloc-backed buffer...

CVE-2026-97920 tracing: Keep the entry count when the histogram stats allocation fails

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

PT-2026-98606

In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude text poking against change page attr From time to time, the following BUG can be observed in the x86 alternatives patching code 0: kernel BUG at arch/x86/kernel/alternative.c:2576! Oops: invalid opcode:...

SUSE CVE-2026-89953

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoops: free page bitmap when the backing MTD is removed mtdoopsnotifyadd allocates oopspageused when the configured MTD device is registered. mtdoopsnotifyremove detaches from that device but leaves the bitmap allocated. I...

CVE-2026-92525 RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate numsge/cursge before indexing wqe-dma.sge For a user QP, qp-sq.queue is a ring the application writes directly, so rxepostsend takes the isuser branch and only schedules sendtask without validating the WQE...

CVE-2026-92525: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate numsge/cursge before indexing wqe-dma.sge For a user QP, qp-sq.queue is a ring the application writes directly, so rxepostsend takes the isuser branch and only schedules sendtask without validating the WQE...

CVE-2026-90042

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

DEBIAN-CVE-2026-90042

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

AZL-101199 CVE-2026-90042 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

CVE-2026-89953

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoops: free page bitmap when the backing MTD is removed mtdoopsnotifyadd allocates oopspageused when the configured MTD device is registered. mtdoopsnotifyremove detaches from that device but leaves the bitmap allocated. I...

AZL-101562 CVE-2026-89953 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoops: free page bitmap when the backing MTD is removed mtdoopsnotifyadd allocates oopspageused when the configured MTD device is registered. mtdoopsnotifyremove detaches from that device but leaves the bitmap allocated. I...

CVE-2026-90042

CVE-2026-90042 affects the Linux kernel's Ceph filesystem client . The root cause is that the messenger client uses kvmalloc() to allocate message buffers, which can place them in the vmalloc() region when physical memory fragmentation prevents a sufficiently large kmalloc(). The fscrypt subsyste...

EUVD-2026-80650

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

CVE-2026-90042 ceph: properly decrypt filenames in vmalloc() buffers

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

CVE-2026-90042 ceph: properly decrypt filenames in vmalloc() buffers

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

CVE-2026-89953 mtd: mtdoops: free page bitmap when the backing MTD is removed

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoops: free page bitmap when the backing MTD is removed mtdoopsnotifyadd allocates oopspageused when the configured MTD device is registered. mtdoopsnotifyremove detaches from that device but leaves the bitmap allocated. I...

CVE-2026-89953

CVE-2026-89953 is a memory leak in the Linux kernel's mtdoops module. The root cause is that mtdoops_notify_remove() detaches from the backing MTD device but leaves the oops_page_used bitmap allocated. When the same MTD device is subsequently re-registered, the add path allocates a new bitmap and...

CVE-2026-90042: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in the linear mapping region. However, the messenger client uses kvmalloc ...

PT-2026-93594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the mtdoops component of the Linux kernel. The mtdoops notify add function allocates a page bitmap oops page used during MTD device registration, but the mtdoops...

Linux Distros Unpatched Vulnerability : CVE-2026-90042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: properly decrypt filenames in vmalloc buffers The fscrypt subsystem uses the scatterlist crypto API, inheriting its requirement that any buffers are in th...