Linux Distros Unpatched Vulnerability : CVE-2026-90428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs tegra241cmdqvprobe requests the error IRQ before it has allocated the cmdqv-vintfs arr...

EUVD-2026-82089

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs tegra241cmdqvprobe requests the error IRQ before it has allocated the cmdqv-vintfs array and set cmdqv-numvintfs. A CMDQV left enabled with a latched error...

CVE-2026-90428 iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs tegra241cmdqvprobe requests the error IRQ before it has allocated the cmdqv-vintfs array and set cmdqv-numvintfs. A CMDQV left enabled with a latched error...

EUVD-2026-81722

In the Linux kernel, the following vulnerability has been resolved: virtioballoon: quiesce balloon work before device shutdown Commit 8bd2fa086a04 "virtio: break and reset virtio devices on deviceshutdown" added a generic virtio bus .shutdown handler that breaks and resets every virtio device...

CVE-2026-90129

This Linux kernel vulnerability affects the virtio_balloon driver. A commit that added a generic virtio bus .shutdown handler (for reboot and kexec) breaks and resets all virtio devices, but virtio_balloon provides no .shutdown of its own, so its asynchronous work remains armed. Once the device i...

lg-webos-kexec

lg-webos-kexec 通过 kexec 在已 root 的 LG webOS 电视上启动自定义 Linux 内核 —— 在 RAM 中运行，无需绕过安全启动。 状态：进行中。 自定义内核可以被暂存并进入用户空间，但尚不能 作为可用的操作系统持续运行。 目标设备 LG 50UP81009LR（webOS 6.5，Realtek RTD2875，armv7l）。通过 Homebrew Channel 获取 root；原厂签名内核 + webOS 用户空间均未改动。 已验证的事实（实机确认） kexec -l 可以暂存（原厂或源码编译的）内核；/sys/kernel/kexecload...

DEBIAN-CVE-2026-89962

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexecfile: Prevent kexec range truncation Sashiko AI review pointed out the following issue. The mergememoryranges function incorrectly handles overlapping memory ranges when merging them. Although sortmemoryranges sorts...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblockfreelate instead of imafreekexecbuffer. The code that calls imafreekexecbuffer is executed long after the memblock allocator has already been removed. This could lead to a use-after-free in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, if the IMA appraisal method is used with the “imaappraiselog” boot parameter, lockdown can be circumvented using kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents the “imaappraiselog” parameter from being set during boot, but this does not cover...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Store the vhost pointer during subcrq allocation Currently, the back pointer from a queue to the vhost adapter is not set until after the subcrq interrupt registration. This value becomes available when a queue is...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: fixed the memory leak in the elf header buffer. This issue was reported by the kmemleak detector: Unreferenced object 0xffffc900002a9000 size 4096: comm “kexec”, pid 14950, jiffies 4295110793 age 373.951s Hex dump firs...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098675 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fixed the crash caused by the scv instruction with kexec. Kexec on pseries disables AIL reloconexc, which is required for supporting scv instructions. This happens before other CPUs have been shut down. This mean...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rcv: kexec: Avoid deadlock in the kexec crash path. If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts function will trigger a deadlock while trying to acquire the irqdesc spinlock...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reported a warning observed during loop testing of the kexec jump: Interrupts were enabled after irqrouterresume+0x0/0x50 Warning: CPU: 0 PID: 560 at...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The imagetkexecbuffer function does not check whether the ima-kexec-buffer of the previous kernel lies outside the addressable memory range. This can lead to a kernel panic if the new kernel is booted with the mem=X argument, and...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fixed the double-free of the elf header buffer. After the patch provided by b3e34a47f989 “x86/kexec: fix memory leak of elf header buffer”, the use of image-elfheaders in the error path of crashloadsegments is no longe...

OESA-2026-3455 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfsattrleafhasname The calling convention of xfsattrleafhasname is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid...

Linux Distros Unpatched Vulnerability : CVE-2026-68455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to...

Linux Distros Unpatched Vulnerability : CVE-2026-72013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where...