PT-2026-121905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists on AMD platforms where holding a USB3 hub Power Management PM runtime reference for 200ms during hub resume causes system crashes. This has been observed by users running...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.4.297 up to and including 5.5, from 5.10.241 up to and including 5.11, from 5.15.190 up to and including 5.16, from 6.1.147 up to and including 6.2, from 6.6.100 up to and including 6.6.160, from 6.12.40 up to and including 6.12.113,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises when the pm runtime is enabled prematurely while the probe is still pending, potentially leading to improper sequencing of device removal and power management disablement...

PT-2026-121874

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the imx mailbox component where the device may be used prematurely before the probe process is completed. This is addressed by implementing devm pm runtime enable and...

PT-2026-122026

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pm runtime get sync leaves the usage counter incremented even when it fails, and xgpio request returns the error without dropping it. gpiolib does not call -free when -reque...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pmruntimeputautosuspend before the error check to ensure that the PM runtime reference count is always decremented after pmruntimegetsync, regardless of whether the read...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fix a race condition related to device removal The following code in pmruntimework may dereference the dev-parent pointer after the parent device has been freed: / Maybe the parent is now able to suspend. / if parent...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fixed a reference leak when pmruntimegetsync fails. The PM reference count is not expected to be incremented on the return in lpi2cimxmasterenable. However, pmruntimegetsync will still increment the PM reference...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fixed the imbalance in the PM usage counter during power-on. The pmruntimegetsync function will increment the PM usage counter even if it fails. Forgetting to perform the necessary operations could lead to a...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pmruntimeget failing in .remove In the unlikely event that pmruntimeget disguised as pmruntimeresumeandget fails, the remove callback returns an error early. The problem is that the driver core ignores thi...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: clk: ti: dra7-atl: Fixed a reference leak in ofdra7atlclkprobe. pmruntimegetsync will increment the pm usage counter. Forgetting to perform the operation will result in a reference leak. Added the missing pmruntimeputsync in some...

PT-2026-98041

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ASOC rockchip rockchip pdm component, the rockchip pdm set fmt function calls pm runtime get sync before accessing hardware registers but fails to check the return value. If the...

PT-2026-94710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm/dsi component where the use of the dev pm opp set rate0 function removes the vote specified in required-opps without actually parking the clock. This resul...

PT-2026-94754

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iris core deinit function where the return value of pm runtime resume and get is not properly checked. If the runtime Power Management PM resume fails, the system...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtimeidle callback and the .remove callback in the rtsxpcr PCI driver leads to a kernel crash due to an unhandled page fault 1. The proble...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: Ethernet: cpsw – Fixed a panic that occurs when the coalece interrupt is set using ethtool. The cpswethtoolbegin function directly returns the result of pmruntimegetsync when it is successful. pmruntimegetsync returns...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Added the missing pmruntimeputsync function. The pmruntimegetsync function will increase the runtime PM counter even when it returns an error. Therefore, a corresponding decrement is required to prevent a refcount lea...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100348 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pmruntimeputautosuspend before the err...

CVE-2026-68463 mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...

CVE-2026-64503

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the...