When Linux kernel developers talk about a “fix” for a race condition, they are often describing more than a simple cleanup: they are closing a timing window that could turn ordinary state management into a use-after-free hazard. That is exactly what happened with CVE-2026-23393, a bridge: cfm...
A recently assigned CVE, CVE-2025-68324, patches a classic kernel glitch in the Linux IMM parallel-port SCSI driver that allowed a use-after-free to occur when a delayed work item was still pending as the driver instance was torn down — the fix adds a synchronous cancellation to ensure the...