39 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: dm-bufio: do not schedule in atomic context A BUG was reported as below when CONFIGDEBUGATOMICSLEEP and tryverifyintasklet are enabled. 129.444685 T934 BUG: sleeping function called from invalid context at...
SUSE CVE-2026-89574
In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the structural fields since both were written. dmarraycursornext takes its loop...
UBUNTU-CVE-2026-89574
In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the structural fields since both were written. dmarraycursornext takes its loop...
CVE-2026-89574
CVE-2026-89574 is a vulnerability in the Linux kernel's device mapper (dm) array component. The root cause is insufficient validation of array block headers during read operations: array_block_check() only verifies blocknr and csum, while element_at() performs unguarded pointer arithmetic driven ...
PT-2026-96352
In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array block check validates blocknr and csum and nothing else, while node check, next to it, has bounded the structural fields since both were written. dm array cursor next takes its...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the dm-array does not validate the fields of the array block header structure during reading. As a result, out-of-bound reads of the dm-bufio buffer occur when the count exceeds the capacity of the block...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053286)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053286 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIGDEBUGATOMICSLEE...
CLSA-2025-1765463110 kernel: Fix of 45 CVEs
Bluetooth: MGMT: Protect mgmtpending list with its own lock CVE-2025-38117 - padata: Fix pd UAF once and for all CVE-2025-38584 - wifi: cfg80211: Fix use after free for wext CVE-2023-53153 - padata: Fix list iterator in padatadoserial - padata: do not leak refcount in reorderwork CVE-2025-38031 -...
SUSE CVE-2026-43132
In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of the failure of dm-verity when creating the dmbufioclientcreate function. Thi...
OESA-2026-1230 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Disable works on hciunregisterdev This make use of disablework on hciunregisterdev since the hcidev is about to be freed new submissions are...
dm-bufio: don't schedule in atomic context
...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: dm-bufio: fixed scheduling in atomic context If “tryverifyintasklet” is set for dm-verity, and DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio attempts to evict buffers, there is a possibility of triggering...
Linux md/dm-bufio.c Heap Buffer Overflow DoS
The vulnerability of the inatomic function in the driver module md/dm-bufio.c of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2025-22867
Malicious code in bioql PyPI...
dm-bufio: fix sched in atomic context
...
Linux Distros Unpatched Vulnerability : CVE-2025-38496
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If tryverifyintasklet is set for...
SUSE CVE-2025-38496
In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "tryverifyintasklet" is set for dm-verity, DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spinlockbh,...
AZL-65925 CVE-2025-38496 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "tryverifyintasklet" is set for dm-verity, DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spinlockbh,...
DEBIAN-CVE-2025-38496
In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "tryverifyintasklet" is set for dm-verity, DMBUFIOCLIENTNOSLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spinlockbh,...