Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper destruction of the hrtimer during the event release path, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2026-23014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to stil...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46845)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46845 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a...

ROS-20260119-7378

A vulnerability in the kernel/time/hrtimer.c component of the Linux kernel is related to insufficient control of the resource during its lifetime. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000840 advisory. sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service deadlock via ...

kernel: mm: slub: avoid wake up kswapd in set_track_prepare

A deadlock lock recursion vulnerability exists in the linux kernel such that when CONFIGDEBUGOBJECTSTIMERS is set, may wake up kswapd in settrackprepare, and try to hold the percpuhrtimerbases lock...

kernel: mm: slub: avoid wake up kswapd in set_track_prepare

A deadlock lock recursion vulnerability exists in the linux kernel such that when CONFIGDEBUGOBJECTSTIMERS is set, may wake up kswapd in settrackprepare, and try to hold the percpuhrtimerbases lock...

SUSE CVE-2025-40327

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...

EUVD-2025-201875

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...

CVE-2025-40327

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...

UBUNTU-CVE-2025-40327

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...

CVE-2025-40327 perf/core: Fix system hang caused by cpu-clock usage

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a system hang, which got bisected back to the following commit by Octavia Togami: 18dbcbfabfff "perf: Fix the POLLHUP...

CVE-2025-40327

CVE-2025-40327 concerns the Linux kernel’s perf/core subsystem where cpu-clock events used by async-profiler could cause a system hang. The root cause was a recursion: __perf_event_overflow() runs from the hrtimer handler for cpu-clock events and attempted to call cpu_clock_event_stop(), which in...

PT-2025-49780

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s perf/core component related to cpu-clock usage. Specifically, the use of cpu-clock by the async-profiler tool can lead to a system hang. This issue...

kernel: mm: slub: avoid wake up kswapd in set_track_prepare

A deadlock lock recursion vulnerability exists in the linux kernel such that when CONFIGDEBUGOBJECTSTIMERS is set, may wake up kswapd in settrackprepare, and try to hold the percpuhrtimerbases lock...

SUSE CVE-2025-40163

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...

UBUNTU-CVE-2025-40142

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spinlockirq on PREEMPTRT sndpcmgrouplockirq acquires a spinlockt and disables interrupts via spinlockirq. This also implicitly disables the handling of softirqs such as TIMERSOFTIRQ. ...

CVE-2025-40163

In CVE-2025-40163, concrete details show a Linux kernel fix for sched/deadline: the dl_server must be stopped before a CPU goes offline to avoid a spurious hrtimer warning when a CPU is removed (drmgr -c cpu -r -q 1). The root cause was dl_server hrtimer enqueued near CPU offline, with cpu_presen...

CVE-2025-40142

CVE-2025-40142 affects the Linux kernel’s ALSA PCM path. The function snd_pcm_group_lock_irq() acquires a spinlock_t using spin_lock_irq(), which disables interrupts and implicitly affects softirq handling. On PREEMPT_RT, softirqs are preemptible and spin_lock_irq() does not disable them, allowin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988836 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211-hwsim: fix late beacon hrtimer handling Thomas explained in...