Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: idpf: fix PREEMPTRT raw/bh spinlock nesting for async VC handling The raw spinlock used by the completion mechanism is replaced with a local lock within the idpfvcxn struct. This conversion is safe because the completion function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131776 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following...

PT-2026-104916

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2 quota init checks for duplicate quota change IDs while holding qd lock and the quota hash bucket bitlock. That path used gfs2 qd search bucket, which takes a lockref reference via lockref...

PT-2026-98140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gfs2 module where the gfs2 quota init function checks for duplicate quota change IDs while holding the qd lock and the quota hash bucket bitlock. This process...

PT-2026-94556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Samsung PWM timer used as a clock source on legacy systems. When PREEMPT RT a real-time patch for the Linux kernel is enabled on ARM architectures, regular spinloc...

PT-2026-94541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A self-deadlock occurs in the IRQ handler of the qcom-cpucp mailbox. The function qcom cpucp mbox irq fn calls mbox chan received data while holding chan-lock. In PREEMPT RT...

PT-2026-94653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where enabling PREEMPT RT Real-Time preemptibility without selecting HAVE POSIX CPU TIMERS TASK WORK causes CPU timers to expire in...

PT-2026-94652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where interrupts may remain disabled when unhandled user faults are triggered. This occurs when do DataAbort or do PrefetchAbort...

PT-2026-94540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom cpucp mbox send data function when it is invoked via the mailbox clear channel function under PREEMPT RT. The issue arises because mailbox...

PT-2026-93644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On PREEMPT RT, a use-after-free issue exists during a Priority Inheritance PI requeue. The problem occurs when FUTEX CMP REQUEUE PI triggers a slab-out-of-bounds report in the futex...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: armsdei: Fixed a bug where sleep operations occurred from an invalid context. Running a preempt-rt v6.2-rc3-rt1 based kernel on an Ampere Altra Triggers: - Bug: Sleeping function called from an invalid context at...

PT-2026-82178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ml-ioh GPIO driver where the register lock uses spinlock t instead of raw spinlock t. The ioh irq type function, acting as the irq chip .irq set type callback, is...

SUSE CVE-2026-74468

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

PT-2026-72920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the GPIO PCH driver where the pch irq type function, registered as the irq chip .irq set type callback, uses a regular spinlock t via spin lock irqsave. In PREEMPT RT...

UBUNTU-CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

EUVD-2026-48772

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428 gpio: sch: use raw_spinlock_t in the irq startup path

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64374 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are waiting...

PT-2026-64650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Spreadtrum EIC controller where the sprd eic irq unmask function enables the GPIO IRQ and updates the controller state via the sprd eic update function. The sprd e...

SUSE CVE-2026-64073

In the Linux kernel, the following vulnerability has been resolved: irqwork: Fix use-after-free in irqworksingle on PREEMPTRT On PREEMPTRT, non-HARD irqwork runs in per-CPU kthreads via runirqworkd, so irqworksync uses rcuwait to wait for BUSY==0. After irqworksingle clears BUSY via atomiccmpxchg...