CVE-2026-89991 bpf: Fix infinite loop in pcpu_freelist push with one possible CPU

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

CVE-2026-89991

CVE-2026-89991 is a bug in the Linux kernel BPF subsystem affecting __pcpu_freelist_push(). When only one CPU is possible (e.g., CONFIG_SMP=n or nr_cpus=1), an NMI re-enters pcpu_freelist_push() while the interrupted context already holds that CPU's freelist lock. The fallback loop skips the curr...

CVE-2026-89991 bpf: Fix infinite loop in pcpu_freelist push with one possible CPU

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

CVE-2026-89964

CVE-2026-89964 affects the Linux kernel on the parisc architecture, specifically the EISA (Extended Industry Standard Architecture) IRQ setup function eisa_irq_setup(). When an invalid value is supplied via the eisa_irq_edge= kernel command-line parameter (e.g., eisa_irq_edge=16,5), the function ...

CVE-2026-89964 parisc: eisa: Fix infinite loop when parsing invalid IRQ value

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

EUVD-2026-80564

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

CVE-2026-89964 parisc: eisa: Fix infinite loop when parsing invalid IRQ value

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

EUVD-2026-80468

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

CVE-2026-89868

This CVE affects the Linux kernel 's chips-media: wave5 VPU decoder driver. The root cause is a potential infinite loop in the stop_streaming function, which can occur when the driver attempts to stop a video decoding stream. The fix introduces a bounded poll of the queue status: the driver now l...

EUVD-2026-80396

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-89796 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-89796

CVE-2026-89796 affects the Linux kernel 's mm/damon/core subsystem. In kdamond_merge_regions() , if the maximum merge threshold exceeds UINT_MAX / 2 , doubling the threshold can overflow and bypass the loop-break condition, causing an infinite loop when the region count cannot be reduced below th...

CVE-2026-89796 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

PT-2026-93605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the parisc eisa component where providing an invalid value through the eisa irq edge= kernel command line parameter causes the eisa irq setup function to enter an...

PT-2026-93437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DAMON Data Access Monitoring component where the kdamond merge regions function can enter an infinite internal loop. This occurs when the number of DAMON regions...

CVE-2026-89796: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

PT-2026-93509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop may occur when the stop streaming function is called. This issue is addressed by implementing a bounded poll of the queue status that continues until the queues drain or...

PT-2026-93917

Name of the Vulnerable Software and Affected Versions HAPI FHIR versions prior to 6.9.12 Description A denial-of-service issue exists when processing Smart Health Card SHC JWT content. If the JWT header contains zip: "DEF" and the raw-DEFLATE payload is empty or truncated, the SHCParser.inflate a...