Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cgroup: Added the missing cpusreadlock function to cgroupattachtaskall. The syzbot tool encounters a warning regarding percpurwsemassertheld&cpuhotpluglock when calling cpusetattach 1. This issue was missed because cpusetattach i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: The WARNONONCE message was removed when the maximum cgroup level was set. By default, the maximum depth of a cgroup is INTMAX. There’s a setting that allows restricting this maximum depth to a more reasonabl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bpf, cgroup: Fixed a kernel bug in purgeeffectiveprogs Syzkaller reported a triggered kernel bug as follows: ------------ Cut here ----------- Kernel bug at kernel/bpf/cgroup.c:925! Invalid opcode: 0000 1 PREEMPT SMP NOPTI CPU...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten the checks for cgroup storage cookies for prog arrays The fix contained in commit abad3d0bad72 “bpf: Fix oob access in cgroup local storage” is still incomplete. The compatibility check for prog arrays treats a progr...

SUSE CVE-2026-74593

In the Linux kernel, the following vulnerability has been resolved: schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...

AZL-97302 CVE-2026-74594 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

CVE-2026-74594

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

EUVD-2026-64376

In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vccsetsockopt vccsetsockopt contained an ineffective optlen check: if SOLEVELMATCHoptname, level && optlen != SOSIZEoptname return -EINVAL; If SOLEVELMATCHoptname, level evaluated to false...

CVE-2026-74689

A slab-out-of-bounds read vulnerability in the Linux kernel's ATM (Asynchronous Transfer Mode) network protocol, specifically in vcc_setsockopt(). The root cause is an ineffective optlen check: when __SO_LEVEL_MATCH evaluates to false, the length validation is short-circuited and bypassed. Additi...

CVE-2026-74689 net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vccsetsockopt vccsetsockopt contained an ineffective optlen check: if SOLEVELMATCHoptname, level && optlen != SOSIZEoptname return -EINVAL; If SOLEVELMATCHoptname, level evaluated to false...

CVE-2026-74594 sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

CVE-2026-74594 sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

EUVD-2026-64531

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...

CVE-2026-74594

CVE-2026-74594 affects the Linux kernel's PSI (Pressure Stall Information) subsystem . A race condition exists between psi_schedule_rtpoll_work(), called locklessly from the scheduler hotpath, and psi_trigger_destroy(), which tears down the last rtpoll trigger under lock. The rtpoll_timer can be ...

PT-2026-79599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between psi schedule rtpoll work and psi trigger destroy. Because psi schedule rtpoll work is called locklessly from the scheduler hotpath, it can conflict with t...

PT-2026-79694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read exists in the vcc setsockopt function. The issue stems from an ineffective optlen check that could be bypassed if the SO LEVEL MATCHoptname, level condition...

Linux Distros Unpatched Vulnerability : CVE-2026-74593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx...

PT-2026-79598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the sched ext component when scx cgroup lock acquires a write-lock on scx cgroup ops rwsem before taking the cgroup lock. This sequence creates a circular...

CVE-2026-74483

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local attacker, operating under specific memory constraints a tight memory cgroup, could repeatedly trigger a failure in the bmfillsuper function during a mount operation. This failure prevents the proper release of...

ROS-20260821-73-0052

The vulnerabilities of the freezerapplystate and freezerchangestate functions in the kernel/cgroup/legacyfreezer.c module of the Linux operating system are related to the occurrence of mutual locking. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrit...