CVE-2026-90120 irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

CVE-2026-90120 irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

CVE-2026-90121: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

CVE-2026-92524: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...

CVE-2026-90120: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double-free on error. The error handling path in itsvpeirqdomainalloc causes a double-free when itsvpeinit fails after successfully allocating at least one interrupt. This occurs because...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/gic/realview: A refcount leak was fixed in realviewgicofinit. The function offindmatchingnodeandmatch returns a node pointer with a incremented refcount. We should use ofnodeput on it when there is no longer a need for...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Error handling in gicpopulateppipartitions was fixed. The function ofgetchildbyname returns a node pointer with a refcount incremented. We should use ofnodeput on it when it is no longer needed. When kcalloc fails...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Do not enable interrupts in itsirqsetvcpuaffinity. The following call-chain results in the enabling of interrupts in a nested interrupt-disabled section: irqsetvcpuaffinity irqgetdesclock rawspinlockirqsave --...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/gic-v3: A refcount leak was fixed in gicpopulateppipartitions. The function offindnodebyphandle returns a node pointer with a incremented refcount. We should use ofnodeput on it when there is no longer a need for it. A...

SUSE CVE-2026-72153

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001494 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in itsvpeirqdomainalloc...

CVE-2026-72153

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

CVE-2026-72153 irqchip/crossbar: Use correct index in crossbar_domain_free()

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

CVE-2026-72153: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

PT-2026-72341

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crossbar domain free function where the domain data is reset before the irq data-hwirq member is used as an index to reset the irq map entry and update the crossba...

The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-64287

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound usedlrs when flushing the pKVM hyp vCPU flushhypvcpu copies the host vGIC state into the hyp's private vCPU on every run. The vGIC list register save and restore use usedlrs as their loop bound and expect it to...

CVE-2026-64287

CVE-2026-64287 affects the Linux kernel’s KVM on arm64. The issue stems from flush_hyp_vcpu() copying host vgic_v3 state to the hyp’s vCPU and not enforcing the expected bound on list registers, which can lead to out-of-bounds access to ICH_LR_EL2 when host values exceed the number of implemented...

ROS-20260701-73-0054

The vulnerability of the gicconfigureirq function in the Linux operating system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...