CVE-2026-99179

A flaw was found in the Linux kernel's watch queue subsystem, which can lead to a Denial of Service DoS. A race condition exists between queue resizing and notification delivery due to improper memory access ordering. A local, unprivileged user could exploit this flaw by concurrently resizing a...

PT-2026-128172

In the Linux kernel, the following vulnerability has been resolved: watch queue: Fix note pool publication race in watch queue set size There is a race between watch queue set size and post one notification. watch queue set size publishes wqueue-notes, notes bitmap, nr pages and nr notes with pla...

CLSA-2025-1747725447 kernel: Fix of 38 CVEs

ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpudiscoveryregbaseinit' CVE-2024-27042 - dm-crypt: don't modify the data when using authenticated encryption...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Free the page array when watchqueue is dismantled Commit 7ea1a0124b6d “watchqueue: Free the alloc bitmap when the watchqueue is torn down” handled the bitmap, but not the page array. BUG: memory leak unreferenced obje...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix filter limit check In watchqueuesetfilter, there are a few places where we check that the filter type value does not exceed what the typefilter bitmap can hold. One place calculates the number of bits as follows: ...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers allocated to user-pipebufs without updating the pipe-nraccounted value on the pipe itself, due to the if !pipehaswatchqueue check in...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix NULL dereference in error cleanup In watchqueuesetsize, the error cleanup code fails to account for the fact that freepage cannot handle a NULL pointer when attempting to free buffer pages that have already been...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Actually free the watch freewatch does everything except for actually freeing the watch object. Fix this by adding the missing kfree. kmemleak produces a report similar to the following. Note that since an address can...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

A race condition was detected in the Linux kernel’s watch queue due to a missing lock in the piperesizering function. The specific flaw lies in the handling of pipe buffers. The problem arises from the lack of proper locking when performing operations on an object. This flaw allows a local user t...

Astra Linux – Vulnerability in Linux 5.10

A out-of-bounds memory write flaw was discovered in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the freewatch function in the kernel/watchqueue.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Watch Queue Set Size Buffer Overflow DoS

The vulnerability of the watchqueuesetsize function in the kernel/watchqueue.c module of the Linux operating system is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992728 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992612 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers...

USN-7887-2: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7887-1 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7887-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-6 linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

USN-7835-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989723 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: Free the page array when watchqueue is dismantled Commit 7ea1a0124b6d watchqueue: Fre...