Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Do not allow a VMOVP operation on a VPE that is already being unmapped. Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change in the affinity of a VPE while the VPE has...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden the getcpuforacpiid function to prevent errors when a missing CPU entry is used. During a review discussion of the changes to support vCPU hotplug, it was noted that a check was added to ensure the GICC Global...

ROS-20260930-73-0098

The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-92524

A flaw was found in the Linux kernel's irqchip/gic-v3-its component. A resource leak occurs when the itsirqgicdomainalloc function fails to properly deallocate resources during error handling. This can lead to a denial of service DoS due to excessive memory consumption...

SUSE CVE-2026-90121

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

SUSE CVE-2026-90120

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

SUSE CVE-2026-92524

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...

Linux Distros Unpatched Vulnerability : CVE-2026-90121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS...

Linux Distros Unpatched Vulnerability : CVE-2026-90120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu...

Linux Distros Unpatched Vulnerability : CVE-2026-92524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for t...

CVE-2026-92524

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...

DEBIAN-CVE-2026-92524

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...

CVE-2026-90121

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

CVE-2026-90120

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

DEBIAN-CVE-2026-90121

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

DEBIAN-CVE-2026-90120

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

CVE-2026-92524 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...

CVE-2026-92524

CVE-2026-92524 affects the Linux kernel GIC-v3-ITS irqchip driver. The root cause is a resource leak in its_vpe_irq_domain_alloc(): when its_irq_gic_domain_alloc() fails, the subsequent its_vpe_irq_domain_free() does not invoke its_vep_teardown() for the corresponding interrupt, leaving the resou...

CVE-2026-92524 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, which leaks the resource. Invoke...

CVE-2026-90121

CVE-2026-90121 affects the Linux kernel GICv5 interrupt controller driver (irqchip/gic-v5). During IRS (Interrupt Routing Structure) affinity setup, an IRS pointer and IAFFID state are published in per-CPU data before the remaining initialization can fail. On the error path and normal teardown, t...