PT-2026-79622

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibs dev alloc dibs-lock is initialised by dibs dev add, but a dibs device can already take interrupts before that call: ism probe runs ism dev init, and hence request irq, before it calls dibs dev...

PT-2026-79695

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism dev exit A ism interrupt handler can be active in parallel with ism dev exit, accessing freed data structures. No new interrupts will be generated after unregister ieq. Drain ongoing...

PT-2026-79658

In the Linux kernel, the following vulnerability has been resolved: serial: 8250 of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORT LPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UART IIR RX TIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74515

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...

CVE-2026-74468

A flaw was found in the Linux kernel's GPIO PCH driver. On systems configured with PREEMPTRT, a local attacker could trigger a specific interrupt handler pchirqtype in a non-sleepable context. This improper use of a spinlock, which attempts to acquire a sleeping lock in an atomic context, can lea...

CVE-2026-74335

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. This vulnerability occurs in the bpftaskfromvpid function when a cgroupskb program, running in a soft interrupt, attempts to look up a task that is in the process of exiting. If the task's process ID PID namespace is...

CVE-2026-72499

A flaw was found in the Linux kernel's RDMA/bnxtre component. During firmware teardown, a memory page is prematurely freed. An NQ interrupt arriving at this time can write data to this already-freed memory, leading to memory corruption. This could potentially result in a system crash or other...

CVE-2026-72384

A flaw was found in the Linux kernel's irqchip/ts4800 driver. The driver fails to properly clear a chained interrupt handler when it is removed. This oversight leaves a dangling handler that could be invoked if the parent interrupt fires after the driver has been unloaded. Such an event could lea...

CVE-2026-72409

A flaw was found in the Linux kernel's mvneta network driver. When a system utilizing this driver enters and exits suspend mode, if a Networked Asynchronous Packet Interface NAPI poll operation is pending, the per-CPU interrupt may not be correctly re-enabled upon resume. This oversight results i...

CVE-2026-74309

A flaw was found in the Linux kernel's vdpa/octeonep component. This vulnerability involves an incorrect mapping of Interrupt Request IRQ numbers to processing rings within the interrupt handler. The system incorrectly calculates the IRQ index, which can lead to misdirected or mishandled...

CVE-2026-72324

A flaw was found in the Linux kernel's Marvell EBU mvebu General Purpose Input/Output GPIO driver. The driver fails to properly free allocated generic chip data when an interrupt domain is removed during the unbind process. This oversight can lead to a resource leak, which may impact system...

CVE-2026-72288

A flaw was found in the KVM Kernel-based Virtual Machine component for ARM64 architecture in the Linux kernel. This vulnerability arises from a race condition within the virtual Generic Interrupt Controller vgic when an interrupt's processor affinity is changed at the same time its Locality-aware...

CVE-2026-72289

A flaw was found in the KVM Kernel-based Virtual Machine arm64 vgic Virtual Generic Interrupt Controller component of the Linux kernel. During interrupt migration, the vgicpruneaplist function temporarily drops and reacquires locks. If an interrupt is removed from the active processor list aplist...

CVE-2026-72294

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component, specifically within the LoongArch architecture. The kvmvcpuioctlinterrupt function, which can be invoked from userspace, lacks proper validation of interrupt requests. This missing validity check could allow a loca...

CVE-2026-72146

A flaw was found in the Linux kernel's dmaengine component. A race condition exists where an interrupt handler or thread may attempt to access uninitialized data structures immediately after an interrupt is requested but before proper initialization. This can lead to invalid memory access,...

CVE-2026-72290

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for s390 PCI. During the setup of guest interrupt forwarding, a reference count refcount to the Guest Interrupt Service Call GISC may not be properly released if subsequent setup steps fail. This resource leak can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-68464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt When using WIFI out-of-band wakeup, an irq xxx: nobody cared warning occurs. This...

Linux Distros Unpatched Vulnerability : CVE-2026-72133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrup...

Linux Distros Unpatched Vulnerability : CVE-2026-72424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313rtcprobe calls devmrequestirq with IRQFSHARED and &pdev-dev as the cookie, but platformsetdrvda...

Linux Distros Unpatched Vulnerability : CVE-2026-72141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine...