356115 matches found
EUVD-2026-115764
In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task. The add that takes the count to zero is the only one that wakes, lat...
CVE-2026-99253 io_uring/cancel: rearm local work wake up before sleep
In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task. The add that takes the count to zero is the only one that wakes, lat...
EUVD-2026-115765
In the Linux kernel, the following vulnerability has been resolved: iouring: don't flood a cancelling task with taskwork ioringexitwork asks each task which has used the ring to remove its tctx node, by taskwork, and repeats that until the list is empty. iotctxexitcb doesn't touch the node while...
CVE-2026-99254
A vulnerability exists in the Linux kernel 's io_uring subsystem where an exiting task can be flooded with task_work callbacks. The issue occurs because io_ring_exit_work() repeatedly attempts to remove tctx nodes , but io_tctx_exit_cb() does not remove them while the task is in io_uring_cancel_g...
CVE-2026-99251 Drivers: hv: Avoid infinite retry loop in init_vp_index()
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in initvpindex There is a retry loop in initvpindex where the CPUs from a certain node are stripped out if they have already been in the allocated cpumask or not in HKTYPEMANAGEDIRQ...
EUVD-2026-115761
In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging on boot. The reports vary but seem to have some overlap with regard to missed IPI's during SMP setup. The reports also show that...
CVE-2026-99250
The Linux kernel contains a vulnerability where NBCON kthreads for console printing are started too early during boot using early_initcall(). Because these kthreads asynchronously enable or disable interrupts, they can interfere with early SMP setup on certain hardware platforms, leading to syste...
EUVD-2026-115762
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in initvpindex There is a retry loop in initvpindex where the CPUs from a certain node are stripped out if they have already been in the allocated cpumask or not in HKTYPEMANAGEDIRQ...
CVE-2026-99251
The Linux kernel contains a vulnerability in the hv drivers where the init_vp_index() function can enter an infinite retry loop . This occurs when the HK_TYPE_MANAGED_IRQ housekeeping cpumask does not contain any CPUs for a specific NUMA node, causing the process to repeatedly retry without findi...
CVE-2026-99250 printk: Postpone kthread startup
In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging on boot. The reports vary but seem to have some overlap with regard to missed IPI's during SMP setup. The reports also show that...
CVE-2026-99250 printk: Postpone kthread startup
In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging on boot. The reports vary but seem to have some overlap with regard to missed IPI's during SMP setup. The reports also show that...
CVE-2026-99249 pid_namespace: make zap_pid_ns_processes() freezable
In the Linux kernel, the following vulnerability has been resolved: pidnamespace: make zappidnsprocesses freezable When the init of a pid namespace exits, zappidnsprocesses waits until all other pids in the namespace are freed. A tracer outside the namespace that does not reap its traced zombies...
CVE-2026-99247 tracing: Do not initialize tracefs work if tracing is disabled
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation fails during early boot e.g. in earlytraceinit - allocatetracebuffers, tracingdisabled is left set to 1 and the global trace array events...
CVE-2026-99248 i2c: xiic: restore non-managed runtime PM to fix clk WARN flood
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pmruntimeenable/disable with devmpmruntimesetactiveenabled and dropped the remove-time runtime PM teardown. The managed release...
EUVD-2026-115778
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pmruntimeenable/disable with devmpmruntimesetactiveenabled and dropped the remove-time runtime PM teardown. The managed release...
EUVD-2026-115777
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation fails during early boot e.g. in earlytraceinit - allocatetracebuffers, tracingdisabled is left set to 1 and the global trace array events...
CVE-2026-99248
The Linux kernel contains a vulnerability in the i2c: xiic driver where a devres conversion caused a clk WARN flood during teardown. The managed runtime PM helper executed teardowns in the incorrect order, leading to clk_core_disable() being called on already-disabled clocks. The fix involves dro...
CVE-2026-99249
In the Linux kernel , a vulnerability in pid_namespace was identified where the zap_pid_ns_processes() function would cause suspend attempts to fail. When the init of a pid namespace exits, this function waits for all other pids in the namespace to be freed. However, if an external tracer fails t...
EUVD-2026-115779
In the Linux kernel, the following vulnerability has been resolved: pidnamespace: make zappidnsprocesses freezable When the init of a pid namespace exits, zappidnsprocesses waits until all other pids in the namespace are freed. A tracer outside the namespace that does not reap its traced zombies...