CVE-2026-89468 power: supply: lp8788-charger: fix use-after-free on remove

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...

CVE-2026-89465

CVE-2026-89465 is a use-after-free in the Linux kernel's rt9455 power supply driver . The threaded IRQ handler can queue delayed work items that are not properly cancelled during device removal or probe failure. Specifically, rt9455_remove() cancels max_charging_time_work before batt_presence_wor...

EUVD-2026-76371

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwrrdywork, maxchargingtimework and battpresencework. pwrrdywork and battpresencework can also queue maxchargingtimework, while...

CVE-2026-80947

CVE-2026-80947 is a use-after-free in the Linux kernel's rtl8xxxu Wi-Fi USB driver. During teardown, rtl8xxxu_stop() failed to cancel the rx_urb_wq worker, so a worker armed by active RX traffic could dereference freed priv after ieee80211_free_hw() freed it. Two races existed: schedule_work() wa...

CVE-2026-80936

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

EUVD-2026-76259

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80936 wifi: mt76: mt7925: cancel mlo_pm_work on stop

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80936 wifi: mt76: mt7925: cancel mlo_pm_work on stop

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80936

CVE-2026-80936 affects the mt7925 Wi-Fi driver in the Linux kernel (part of the mt76 subsystem). During multi-link power-save setup, the driver queues mlo_pm_work with a 5-second delay but never cancels it on the stop path. If the device is torn down within that window, the timer fires after tear...

CVE-2026-80932 vsock/virtio: flush works in dependency order

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

CVE-2026-80932 vsock/virtio: flush works in dependency order

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

PT-2026-90181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the rt9455 power supply driver during the teardown process. The rt9455 remove function cancels max charging time work before batt presence work, allowing the...

PT-2026-90135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the IPMI system interface si during a failed registration process. When try smi init fails to obtain the BMC device information via bmc get device id...

CVE-2026-80932: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

CVE-2026-80936: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

PT-2026-90066

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the mt7925 driver where mlo pm work is queued with a 5-second delay during multi-link power-save setup but is not cancelled during the stop path. If the device is torn dow...

PT-2026-90397

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the nfsd component where the workqueue core clears WORK STRUCT PENDING before the callback is invoked. This causes delayed work pending in the lm breaker timedout...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053410 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053287)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053287 advisory. In the Linux kernel, the following vulnerability has been resolved: quota: flush quotareleasework upon quota writeback One of the paths quota writeback is called fr...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053245 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. I...