CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64374 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are waiting...

CVE-2026-64374

CVE-2026-64374 concerns the Linux kernel’s RT scheduling path. The vulnerability stems from making RT_PUSH_IPI default off for non-PREEMPT_RT configurations, which could affect RT migration when high-priority RT tasks are scheduled across CPUs. The mechanism normally pulls RT tasks between CPUs u...

CVE-2026-64329

CVE-2026-64329 concerns the Linux kernel USB Type-C UCSI CC G use-after-free on remove. The bug is caused by freeing uc->ucsi (kfree) in ucsi_ccg_remove() after the threaded IRQ handler may still access it via ucsi_notify_common() during a connector-change event, leading to a potential use-aft...

EUVD-2026-48988

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...

CVE-2026-64265 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...

SUSE CVE-2026-64210

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when the affinity changes and there's still XSK work to be done, we trigger an ICOSQ interrupt on the new CPU. However, this triggering on the ICOSQ is done...

SUSE CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

SUSE CVE-2026-64214

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

SUSE CVE-2026-64230

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c "regulator: tps65219: Remove debugging helper function" removed the tps65219getrdevbyname helper along with the irqdata.rdev assignment that depended on...

SUSE CVE-2026-64241

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce clock reference leak: The debounce clock bank-dbclk is obtained using...

Linux Distros Unpatched Vulnerability : CVE-2026-64461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtkpcieenableport fails, mtkpcieportfree removes the port from pcie-ports and frees the port...

Linux Distros Unpatched Vulnerability : CVE-2026-64500

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: lpc32xxadcprobe in drivers/iio/adc/lpc32xxadc.c registers its...

PT-2026-64682

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk pcie enable port fails, mtk pcie port free removes the port from pcie-ports and frees the port structure. However, the IRQ domains set up earlier by mtk pcie...

PT-2026-64659

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf disable sriov The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to per-VF state struct adf accel vf info. Currently, adf disable sriov destroys...

PT-2026-64486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the FUSE Filesystem in Userspace module. When the fuse resend function moves a request from fpq-processing back to fiq-pending, it fails to remove the in...

PT-2026-64650

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw spinlock t in the irq startup path sprd eic irq unmask enables the GPIO IRQ and then updates controller state through sprd eic update, which takes sprd eic-lock with spin lock irqsave. The callback can be...

Linux Distros Unpatched Vulnerability : CVE-2026-64462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fail...

Linux Distros Unpatched Vulnerability : CVE-2026-64213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware...

Linux Distros Unpatched Vulnerability : CVE-2026-64210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when the affinity changes and there's still XSK work to be done, we trigger an ICOSQ interrupt o...