CVE-2026-90244

A flaw was found in the Linux kernel. Specifically, within the iommu/dma component, a lack of proper locking in the VFIO type1 legacy container could allow concurrent access to the msipagelist. This concurrent access can lead to data corruption of the msipagelist, potentially causing system...

USN-8921-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8921-1 linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8922-1 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

CVE-2026-89777

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

DEBIAN-CVE-2026-98282

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...

UBUNTU-CVE-2026-98282

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...

CVE-2026-98282 powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...

CVE-2026-98282

The Linux kernel contains a vulnerability in the powerpc/iommu component related to iommu_tce_check_ioba. The issue arose because a previous commit unified IOBA parameter checking but ignored the npages argument, using a constant value of '1' instead. This omission could lead to an arithmetic ove...

CVE-2026-98282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fixed a potential memory leak in vfiointxenable If vfioirqctxalloc fails, it will lead to a ‘name’ memory leak...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vfio/mlx5: Fixed issues with bitfields and improved the structure of struct definitions. Bitfield operations are not atomic; they follow a read-modify-write pattern. Therefore, we need to be careful not to pack bitfields that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: The VGA arbiter client is released upon a failure in registerdevice. The reordering in the “Fixes” commit below moved vfiopcivgainit to become the last failure point in vfiopcicoreregisterdevice, without introducing a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SETIRQS ioctl currently allows loopback triggering of an interrupt before a signaling eventfd has been configured by the user, which allows a NULL pointer dereferenc...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Created a persistent INTx handler. There exists a vulnerability where the eventfd for INTx signaling can be deconfigured. This causes the IRQ handler to be unregistered, but it still allows eventfds to be signaled with ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Blocking calls to interrupt handlers without triggering them The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL, and it may become NULL if the user sets the trigger parameter of eventfd to -1...

The vulnerability of the `vfio_cdx_set_msi_trigger()` function in the driver/vfio/cdx/intr.c file of the VFIO device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vfiocdxsetmsitrigger function in the driver/vfio/cdx/intr.c driver for VFIO devices in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260925-73-0081

The vulnerability of the vfioiommuiovabuildcaps function in the drivers/vfio/vfioiommutype1.c file of the VFIO device driver in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-93238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without...

SUSE CVE-2026-93238

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...