PT-2026-94793

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the trampoline could be corrupted due to the incorrect assignment of tr-flags in the verifier. When a fexit is attached to a tail call reachabl...

PT-2026-94508

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lwt bpf component where the headroom check after an LWT XMIT BPF program is insufficient. The ip finish output2 function expands a socket buffer skb to LL RESERVED...

PT-2026-94538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the null blk component, a race condition exists during initialization. The mutex init&lock function is called after configfs register subsystem, which exposes the nullb subsystem to...

PT-2026-94810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system when operating in data=journal mode. During a system reboot, while the superblock is being remounted as read-only, the writeback thread may trigge...

PT-2026-94505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cgroup getsockopt BPF program where the ctx-optlen can be shrunk after the kernel getsockopt handler has executed. In the kernel-buffer variant used by TCP ZEROCOP...

PT-2026-94936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Universal Disk Format UDF implementation where an I/O error during the writing of the Logical Volume Integrity Descriptor LVID buffer to a block device causes the...

CVE-2026-90021

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: initialize work in fmidialloc fmidialloc initializes freeref to 1 and it can only be incremented when a sound card is registered via fmidiregistercard. fmidiregistercard is only called in fmidibind which...

AZL-101144 CVE-2026-90021 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: initialize work in fmidialloc fmidialloc initializes freeref to 1 and it can only be incremented when a sound card is registered via fmidiregistercard. fmidiregistercard is only called in fmidibind which...

CVE-2026-89973

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload, but it does not check that the command asked for data to be read. A controller that answer...

DEBIAN-CVE-2026-89979

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state transitions between atomic PCM ops, but the checks between the non-atomic ops hwparams, hwfree and prepare and the atomic o...

AZL-101397 CVE-2026-89979 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state transitions between atomic PCM ops, but the checks between the non-atomic ops hwparams, hwfree and prepare and the atomic o...

CVE-2026-89979

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state transitions between atomic PCM ops, but the checks between the non-atomic ops hwparams, hwfree and prepare and the atomic o...

DEBIAN-CVE-2026-89973

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload, but it does not check that the command asked for data to be read. A controller that answer...

EUVD-2026-80639

In the Linux kernel, the following vulnerability has been resolved: usb-storage: eneub6250: fix race between scan work and probe eneub6250probe calls usbstorprobe2, which starts the usb-storage infrastructure and schedules the delayed scan work. The driver then calls enegetcardtype, which sends a...

CVE-2026-90031

CVE-2026-90031 affects the Linux kernel's ene_ub6250 USB storage driver. The root cause is a race condition on the shared us->current_urb field: the delayed scan work (via usb_stor_Bulk_max_lun()) and the probe path (via ene_get_card_type()) both access it concurrently, with only the scan path...

CVE-2026-90021

In the Linux kernel , the USB gadget f_midi driver contained a bug where INIT_WORK was performed in f_midi_bind() rather than f_midi_alloc(). If f_midi_bind() was never executed, the work struct remained uninitialized, causing f_midi_free to trigger a warning in __flush_work due to work->func ...

CVE-2026-90021 usb: gadget: f_midi: initialize work in f_midi_alloc()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: initialize work in fmidialloc fmidialloc initializes freeref to 1 and it can only be incremented when a sound card is registered via fmidiregistercard. fmidiregistercard is only called in fmidibind which...

EUVD-2026-80579

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state transitions between atomic PCM ops, but the checks between the non-atomic ops hwparams, hwfree and prepare and the atomic o...

CVE-2026-89979

CVE-2026-89979 is a race condition in the Linux kernel ALSA PCM subsystem. Non-atomic operations (hw_params, hw_free, prepare) can be in progress when another thread issues an atomic PCM trigger-start , causing state inconsistency (e.g., ODEBUG warnings reported by syzkaller ). The CVSS 3.1 score...

EUVD-2026-80573

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload, but it does not check that the command asked for data to be read. A controller that answer...