CVE-2026-89941 iio: buffer: Make IIO DMA fence release RCU-safe

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Make IIO DMA fence release RCU-safe The dmafence documentation states that if a custom release implementation is provided, the dmafence object must be freed in an RCU-safe way. The current iiodmafence implementation...

CVE-2026-89941

CVE-2026-89941 is a use-after-free vulnerability in the Linux kernel IIO buffer subsystem (iio: buffer). The iio_dma_fence implementation provided a custom release callback that called kfree(), which is not RCU-safe as required by the dma_fence documentation. The fix removes the custom release, a...

CVE-2026-89941 iio: buffer: Make IIO DMA fence release RCU-safe

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Make IIO DMA fence release RCU-safe The dmafence documentation states that if a custom release implementation is provided, the dmafence object must be freed in an RCU-safe way. The current iiodmafence implementation...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: The code for radeonfenceprocess has been removed in issignaled, preventing deadlocks. The attempt to advance the queue when checking whether the fence is signaled has been eliminated. This prevents deadlocks. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Install a stub fence into potential unused fence pointers. When using cpu to update page tables, VM update fences are unused. Install a stub fence into these fence pointers instead of setting them to NULL. This preven...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the issue where the fence was put before waiting in amdgpuamdkfdsubmitib. The amdgpuamdkfdsubmitib function submits a GPU job and obtains a fence from amdgpuibschedule. This fence is used to wait for the job to...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu/amdgpucs: fixed the reference count leak of a dmafence object. This issue occurs in an error path within amdgpucsfencetohandleioctl. When info-in.what falls under the default case, the function simply returns...

CVE-2026-89590

A flaw was found in the accel/rocket driver within the Linux kernel. Incorrect error handling in the rocketjobrun function can lead to resource leaks. This occurs when the system fails to properly release references to Direct Memory Access DMA fences and Power Management PM resources during error...

PT-2026-90306

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocket job run In rocket job run, after taking an extra fence reference for job-done fence via dma fence get, the error paths have three bugs: - The dma fence reference held by job-done...

SUSE CVE-2026-72094

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can fully decouple from fence consumers. This, desirable, mechanism is...

SUSE CVE-2026-74418

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Tracedmafencesignaled, tracedmafencewaitend and tracedmafencedestroy can all currently dereference a null fence-ops pointer after it has been reset on fence signalling...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-fence: Fixed the potential issue of dereferencing a null pointer in tracedmafinesignaled, tracedmafinewaitend, and tracedmafinedestroy. After the fence signalling is reset, a null fence-ops pointer may be dereferenced. We...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-buf: dma-fence: Fixed potential NULL pointer dereferencing issues. The commit mentioned in the fixes section introduced a mechanism through which fence producers can be fully decoupled from fence consumers. This desirable...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Ensure that dmafencededuparray is robust against inputs with a count of 0. The function dmafencededuparray returns 1 when called with numfences == 0. In this case, the body of the for-loop never executes; j remains at ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102062 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeonfenceprocess in issignaled, no deadlock Delete the attempt to progress t...

CVE-2026-74418

A flaw was found in the dma-fence subsystem of the Linux kernel. This vulnerability allows for a null pointer dereference in tracepoint functions, such as tracedmafencesignaled, tracedmafencewaitend, and tracedmafencedestroy, after a fence operation has been signaled and its internal pointers...

Linux Distros Unpatched Vulnerability : CVE-2026-74418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Tracedmafencesignaled,...

Linux Distros Unpatched Vulnerability : CVE-2026-72095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-fence: Make dmafencededuparray robust against 0-count input dmafencededuparray returns 1 when called with numfences == 0: the for-loop body never executes, ...

Linux Distros Unpatched Vulnerability : CVE-2026-72094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes...

CVE-2026-72095

A flaw was found in the Linux kernel's dma-fence component. The dmafencededuparray function incorrectly handles zero-count input, leading to a memory corruption vulnerability. A local attacker could potentially exploit this by triggering specific conditions in the amdgpuuserqwait functions, which...