PT-2026-72503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the Direct I/O DIO path causes a delayed dentry reference-count release. This occurs when the unmount path is triggered before the cleanup work is...

PT-2026-72914

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On certain i.MX platforms, a system hang can occur during the suspend and resume process. This happens because some I2C client drivers use a periodic workqueue that continues to trigger...

PT-2026-72530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A registration race condition exists in the net/mlx5e module. The function mlx5e hv vhca stats create uses mlx5 hv vhca agent create to register a stats agent. This helper publishes the...

PT-2026-72750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where map update and delete paths call the bpf obj free fields function when a value is replaced or recycled. This causes field destruction to depend...

PT-2026-72893

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A synchronization issue exists during port unregistration in the USB Type-C UCSI subsystem. Pending partner work items can race against workqueue destruction, resulting in use-after-free...

PT-2026-72593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the udp tunnel nic device sync work function during concurrent device operations. The issue occurs because the workqueue core clears the internal...

PT-2026-72695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the CIFS module during the unmounting process. When CIFS files are placed into the fileinfo put wq queue during an umount operation, the...

PT-2026-72262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vub300 driver. The driver manages controller state lifetime using vub300-kref, where vub300 delete frees the mmc host once the last reference is...

Linux Distros Unpatched Vulnerability : CVE-2026-72405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork durin...

Linux Distros Unpatched Vulnerability : CVE-2026-72337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: avoid untracked enable work lowpanenableset allocates a temporary work item and schedules doenableset on systemwq, then returns to debugfs...

Linux Distros Unpatched Vulnerability : CVE-2026-72342

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix HV VHCA stats agent registration race mlx5ehvvhcastatscreate registers the stats agent through mlx5hvvhcaagentcreate. The helper publishes the...

Linux Distros Unpatched Vulnerability : CVE-2026-74442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver...

SUSE CVE-2026-68367

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: synchronize delayed setalt with teardown The ftcm setalt path defers endpoint setup to a work item and completes the delayed status response from process context. The delayed work uses ftcm private state and ma...

SUSE CVE-2026-68403

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmfsdioprobe stores the newly allocated bus in sdiodev-bus before allocating the ordered workqueue. If that allocation fails, the function jumps to fail and calls...

SUSE CVE-2026-68382

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy worker, drmm cleanup can end up draining the same workqueue and deadlock...

SUSE CVE-2026-68318

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix use-after-free on workqueue during remove In pdscremove, the workqueue is destroyed before pdscteardown is called. This ordering allows two paths to queue work on the destroyed workqueue: 1. If pdscteardown -...

CVE-2026-68318

A flaw was found in the pdscore component of the Linux kernel. This use-after-free vulnerability occurs because the workqueue is destroyed prematurely during the pdscremove operation, before pdscteardown completes. This timing issue allows for work to be queued on an already destroyed workqueue,...

media: pci: dm1105: Free allocated workqueue

...

Linux Distros Unpatched Vulnerability : CVE-2026-68318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pdscore: fix use-after-free on workqueue during remove In pdscremove, the workqueue is...

Linux Distros Unpatched Vulnerability : CVE-2026-68319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pdscore: fix deadlock between reset thread and remove pciresetfunction acquires devicelock...