Linux Distros Unpatched Vulnerability : CVE-2026-90181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ublk: avoid teardown retry loop on xarray allocation failure ublkshmemremoveranges removes matching maple tree ranges in batches, but first stores each range in...

EUVD-2026-81745

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbdsessionregister See the procedure below: smb2sesssetup ksmbdsmb2sessioncreate sessioncreate atomicset&sess-refcnt, 2 hashaddsessionstable, &sess-hlist, sess-id ksmbdsessionregister...

CVE-2026-90152 smb/server: fix session leak in ksmbd_session_register()

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbdsessionregister See the procedure below: smb2sesssetup ksmbdsmb2sessioncreate sessioncreate atomicset&sess-refcnt, 2 hashaddsessionstable, &sess-hlist, sess-id ksmbdsessionregister...

CVE-2026-90152

CVE-2026-90152 is a session leak in the Linux kernel's ksmbd (in-kernel SMB server). The root cause is a reference-counting error in ksmbd_session_register(): when xa_store() fails to add a session to the connection's session map, the session is not removed from the global sessions_table and one ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fixed the missing error check for xastore. xastore may fail. It returns xaerr-EINVAL if the entry cannot be stored in an XArray, or xaerr-ENOMEM if memory allocation fails. Therefore, a check for errors in xastore is...

Linux Distros Unpatched Vulnerability : CVE-2026-89446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the...

CVE-2026-89446

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

CVE-2026-89446

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

UBUNTU-CVE-2026-89446

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

EUVD-2026-76352

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

CVE-2026-89446

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

CVE-2026-89446 iommufd: Release current IOAS on xa_store() failure

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

CVE-2026-89446

CVE-2026-89446 affects the Linux kernel iommufd subsystem. The root cause is in the error-handling path of iommufd_take_all_iova_rwsem(): when xa_store() fails to insert the current IOAS into the ioas_list xarray, the subsequent call to iommufd_release_all_iova_rwsem() only unwinds entries alread...

CVE-2026-89446 iommufd: Release current IOAS on xa_store() failure

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xastore failure iommufdtakealliovarwsem takes an object reference and the iovarwsem write lock before storing the IOAS in the temporary ioaslist xarray. If xastore fails, the current IOAS has not...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/xe/regsr: Fixed a leak that occurred when xastore failed. The newly allocated entry was freed when xastore failed, thereby avoiding a memory leak in the error path. v2: Used “goto failfree”. Bala Cherry-picked from commit...

SUSE CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

EUVD-2026-18634

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

CVE-2026-23418

A flaw was found in the Linux kernel. This memory leak vulnerability occurs when the xastore function fails to store a newly allocated entry, leading to the entry not being freed. An attacker could potentially exploit this flaw to exhaust system memory, resulting in a Denial of Service DoS...

CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

CVE-2026-23418

The CVE-2026-23418 issue affects the Linux kernel component drm/xe/reg_sr. It describes a memory leak that occurs when xa_store() fails to store a newly allocated entry, leaving the entry not freed on the error path. The patched fix frees the allocated entry on error (notably via a goto fail_free...