Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netlink: Fixed wraparounds of sk-skrmemalloc. Netlink has this pattern in some places: c if atomicread&sk-skrmemalloc sk-skrcvbuf atomicaddskb-truesize, &sk-skrmemalloc; This issue was also fixed in commit 5a465a0da13e “udp: Fixe...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Returns a CQE error if an invalid lkey is provided. In RXE, there is a lack of update of the WQE status in cases of LOCALwrite failures. This caused the following kernel panic if someone performed an atomic operation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observed the following issues: - Splat: 167.057718 BUG: Sleeping function called from invalid context at include/linux/sched/mm.h:229...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix for sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, the function xhcifreestreams is called from the hubevent workqueue to free the stream resources. This...

SUSE CVE-2026-98058

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

Rocky Linux 9.2 [CIQ] Security Update: tuned / tuned-gtk / tuned-profiles-atomic / etc Multiple Vulnerabilities (ciqsa-2026_0501)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260501 advisory. This advisory aggregates security fixes for the tuned SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2024-52337, CVE-2024-52336. Tenable has extracted the...

CVE-2026-97501

A flaw was found in the Linux kernel's MediaTek pin controller pinctrl driver, which can lead to a Denial of Service DoS. When configuring general-purpose input/output GPIO pin directions, the driver attempts to acquire a blocking lock while operating in an atomic context. A local attacker could...

CVE-2026-98049

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When executing a 32-bit atomic compare-and-exchange operation on arena memory, the kernel fails to properly clear zero-extend the upper half of the target register as required by BPF specifications. A local attacker with...

CVE-2026-97521

A flaw was found in the Linux kernel's GFS2 Global File System 2 file system, which can lead to a Denial of Service DoS. In real-time kernel configurations, the quota initialization routine improperly invokes a sleeping function while holding an atomic lock. A local user capable of triggering GFS...

CVE-2026-97514

A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Improper synchronization during dynamic resolution changes allows functions that may sleep to run while holding an atomic lock, and permits state changes without required locks held. A local user with access to the video...

CVE-2026-93815

A flaw was found in the Linux kernel's Au1000 Ethernet driver. This vulnerability allows a privileged local user to cause a Denial of Service DoS when disabling or closing the network interface. The issue occurs because the driver executes a sleepable interrupt cleanup routine while holding an...

AZL-104553 CVE-2026-98058 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

DEBIAN-CVE-2026-98058

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

CVE-2026-98058

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

UBUNTU-CVE-2026-98058

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

CVE-2026-98071

The Linux kernel contains a data race in the net/rds component within the rds_conn_path_reset() function. The vulnerability stems from the use of a plain store (cp->cp_flags = 0) to wipe the flag word, while other accessors use atomic bitops concurrently. This race condition can cause updates ...

EUVD-2026-86711

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

CVE-2026-98058

The Linux kernel contains a vulnerability where the bpf_sys_bpf() and bpf_sys_close() helpers lack the .might_sleep attribute. Because these helpers can take mutexes, allocate memory with GFP_KERNEL, or wait for RCU grace periods, their use in non-sleepable contexts—such as a bpf_timer callback e...

CVE-2026-98058 bpf: Mark syscall helpers as sleepable

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

CVE-2026-98058 bpf: Mark syscall helpers as sleepable

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...