EUVD-2026-80654

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-90046

CVE-2026-90046 is a Linux kernel vulnerability in the mm/page_alloc subsystem where free_pages_nolock() uses spin_trylock() in NMI context on UP (uniprocessor) builds, an unsafe usage previously noted in can_spin_trylock(). A prior commit fixed the allocation side but missed the free side. The im...

CVE-2026-90046 mm/page_alloc: don't spin_trylock() in NMI on UP

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-90046 mm/page_alloc: don't spin_trylock() in NMI on UP

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-89991 bpf: Fix infinite loop in pcpu_freelist push with one possible CPU

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

EUVD-2026-80599

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

CVE-2026-89991

CVE-2026-89991 is a bug in the Linux kernel BPF subsystem affecting __pcpu_freelist_push(). When only one CPU is possible (e.g., CONFIG_SMP=n or nr_cpus=1), an NMI re-enters pcpu_freelist_push() while the interrupted context already holds that CPU's freelist lock. The fallback loop skips the curr...

CVE-2026-89991 bpf: Fix infinite loop in pcpu_freelist push with one possible CPU

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

CVE-2026-90046: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

PT-2026-93687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management subsystem where the use of spin trylock within a Non-Maskable Interrupt NMI on Uniprocessor UP systems is unsafe. This occurs specifically during...

CVE-2026-89991: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

PT-2026-93632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop can occur in the pcpu freelist push function when the system is configured with only one possible CPU such as when CONFIG SMP=n or nr cpus=1. This happens if a...

Linux Distros Unpatched Vulnerability : CVE-2026-89991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters...

Linux Distros Unpatched Vulnerability : CVE-2026-90046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagealloc: don't spintrylock in NMI on UP Patch series mm/pagealloc: fixes for freepagesnolock on RT/UP. Pre-existing bugs found by Sashiko during review of...

SUSE CVE-2026-74337

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpflrupopfree/pushfree already hold on the same CPU, AA-deadlocking. Lockdep reports...

SUSE CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete operations currently call bpfobjfreefields when a value is being replaced or recycled. This means that the destruction of special fields depends on the context...

CVE-2026-74337

A flaw was found in the Linux kernel, specifically within the BPF Berkeley Packet Filter subsystem. This vulnerability allows NMI Non-Maskable Interrupt and tracepoint BPF programs to re-enter certain internal locks, known as LRU Least Recently Used locks, while they are already held. This re-ent...

CVE-2026-74314

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability arises from improper handling of special fields during the recycling of map values, which can lead to unsafe destruction operations. Specifically, in tracing programs operating within a Non-Maskable...

CVE-2026-74337

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpflrupopfree/pushfree already hold on the same CPU, AA-deadlocking. Lockdep reports...