CVE-2026-81010

A flaw was found in the Linux kernel's iouring/waitid component. The iowaitidcb function, when running from a kernel worker, fails to properly acknowledge task work cancellation. This oversight causes the dowait function to execute within an incorrect task context, which is critical as waitid...

DEBIAN-CVE-2026-89734

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcgvideoinit In uvcgvideoinit, if kthreadrunworker fails, the error logged uses uvcgerr, however, the pointer it uses: video-uvc is not assigned at this point, triggering a null...

DEBIAN-CVE-2026-89464

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

CVE-2026-89464

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

AZL-100617 CVE-2026-89464 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

CVE-2026-80958

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cachereplay, the writeback worker and the GC worker bounds its length by PCACHESEGSIZE - segoff, the raw segment size rather than the data regio...

UBUNTU-CVE-2026-89681

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...

UBUNTU-CVE-2026-89464

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

CVE-2026-89464

CVE-2026-89464 affects the Linux kernel component power: supply: twl4030_charger . The root cause is a use-after-free : the bci structure is devm-allocated, but twl4030_bci_remove() fails to cancel two workers (bci->work and bci->current_worker) that dereference it, allowing a pending worke...

EUVD-2026-76370

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

CVE-2026-89464

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

CVE-2026-89464 power: supply: twl4030_charger: cancel workers via devm

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

CVE-2026-89464 power: supply: twl4030_charger: cancel workers via devm

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

EUVD-2026-76281

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cachereplay, the writeback worker and the GC worker bounds its length by PCACHESEGSIZE - segoff, the raw segment size rather than the data regio...

CVE-2026-80958 dm-pcache: clamp the tail kset read to the segment data region

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cachereplay, the writeback worker and the GC worker bounds its length by PCACHESEGSIZE - segoff, the raw segment size rather than the data regio...

CVE-2026-80947

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rxurbwq on stop rtl8xxxu arms rxurbwq from the RX completion path: rtl8xxxurxcomplete hands the URB to rtl8xxxuqueuerxurb, which queues it on rxurbpendinglist and, once the list grows past...

CVE-2026-80947 wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rxurbwq on stop rtl8xxxu arms rxurbwq from the RX completion path: rtl8xxxurxcomplete hands the URB to rtl8xxxuqueuerxurb, which queues it on rxurbpendinglist and, once the list grows past...

CVE-2026-49009

CVE-2026-49009 — Mender Server Authenticated Path Traversal to Remote Code Execution Discovered by j0xh-sec via HackerOne · PoC by INTELEON404 Table of Contents Vulnerability Summary Affected Versions Technical Analysis Proof of Concept Python Exploit Nuclei Template ShodanX + Nuclei Scanner Usag...

PT-2026-90183

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the qcom battmgr pdr notify function. The function queues enable work when the PMIC GLINK service starts, and the worker uses container of to recover...

PT-2026-90450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the uvcg video init function. When kthread run worker fails, the system attempts to log an error using uvcg err. However, because the video-uvc point...