PT-2026-117037

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not wake up kswapd in kfree rcu sheaf Since kfree rcu can be called under pi lock a raw spinlock in the scheduler, kfree rcu itself should never allocate memory with GFP KSWAPD RECLAIM as waking up kswapd ends up...

CVE-2026-98865: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't run ops.dequeue with a DSQ lock held ops.dequeue is invoked with the source user DSQ's lock still held on the consume and move paths scxconsumedispatchq, movetaskbetweendsqs. A BPF scheduler which locks the source...

CVE-2026-98818: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not wake up kswapd in kfreercusheaf Since kfreercu can be called under pilock a raw spinlock in the scheduler, kfreercu itself should never allocate memory with GFPKSWAPDRECLAIM as waking up kswapd ends up acquiring...

PT-2026-117051

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg tryget closest bio set dev associates the bio with a blkg through bio associate blkg. If the blkg lookup misses, blkg tryget closest takes q-queue lock with spin lock irq and releases it with sp...

PT-2026-116739

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free and multi-container gap in kfd dev mapping kfd dev mapping caches the address space of the first /dev/kfd opener so that the GPU reset path can call unmap mapping range to zap all userspace mappings...

PT-2026-117084

In the Linux kernel, the following vulnerability has been resolved: sched ext: Don't run ops.dequeue with a DSQ lock held ops.dequeue is invoked with the source user DSQ's lock still held on the consume and move paths scx consume dispatch q, move task between dsqs. A BPF scheduler which locks the...

Security update for cosign (important)

openSUSE security update: security update for cosign ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22064-1 Rating: important References: bsc1272117 bsc1275025 bsc1278614 bsc1279215 bsc1282542 Cross-References: CVE-2026-56852 CVE-2026-56854...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability arises from calling ops.dequeue while holding the source user’s DSQ lock. When the BPF scheduler locks the source user’s DSQ using ops.dequeue, a deadlock can occur. Additionally, all DSQ locks share the same lockd...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of the spinunlockirq function in the blkgtrygetclosest function, which unlocks the queue lock without any conditions, potentially causing a deadlock when holding pool-lock...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities arise from the fact that accessing pilock occurs when waking up kswapd in kfreercusheaf. This can lead to deadlocks...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 3.10.106 through 3.11, 3.12.71 through 3.13, and 3.14. These vulnerabilities stem from improper handling of transmission states, specifically those marked as SCTPUNCONFIRMED, during the update and retransmission process via the...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4687-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4687-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: -...

CVE-2026-70186

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-98431

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A circular locking dependency between memory mapping locks and device disassociation locks can lead to a deadlock condition during concurrent operations. A local user could trigger this vulnerability by performing...

Linux Distros Unpatched Vulnerability : CVE-2026-70186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-70186 Note that Nessus relies on the presence of the package a...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: The issue was fixed by dropping all dirty pages during umount if cperror is set. The xfstest generic/361 report indicates a bug as follows: f2fsbugonsbi, sbi-fsyncnodenum; Kernel bug located at fs/f2fs/super.c:1627! RIP:...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB Server before version 10.7 is vulnerable to Denial of Service attacks. During the execution of the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released properly, allowing local users to trigger a Denial of Service attack due to a deadlock...

Astra Linux – Vulnerability in Linux 5.15

A flaw was discovered in the ksmbd component of the Linux kernel. A deadlock occurs when multiple session setup requests are sent simultaneously, which may lead to a denial of service...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: vlan: do not propagate flags on open With the device instance lock, there is now a possibility of a deadlock: 1.211455=========================================== 1.211571WARNING: possible recursive locking detected...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: qede: Synchronization of UDP tunnel ports outside the qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured disrupts the rtnetlink control plane of the entire machine: NETDEV...