Linux Distros Unpatched Vulnerability : CVE-2026-74741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

CVE-2026-74741: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or initialized. Calling NGBEINTRMISCwx dereferences wx-msixentry-entry,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098703 advisory. In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104541 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x,...

PT-2026-82129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hard lockup can occur during a granted time slice extension. The function exit to user mode loop calls rseq grant timeslice extension while interrupts are enabled. If the extension is...

CVE-2026-74653

A flaw was found in the Linux kernel's 8250of serial driver, specifically affecting NXP LPC32xx UARTs. A local user could repeatedly open a specific serial port, triggering a stuck RX character-timeout interrupt. This leads to an interrupt storm that can livelock the CPU, resulting in a Denial of...

The vulnerability of the `dw_pcie_ep_raise_msixirq()` function in the `drivers/pci/controller/dwc/pcie-designware-ep.c` driver for Linux PCI-core devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dwpcieepraisemsixirq function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux PCI devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-74629

A flaw was found in the Linux kernel's dibs device handling. A use-after-free UAF vulnerability exists where a dibs device interrupt handler can access dmbclientidarr after it has been freed. Additionally, a double-free vulnerability can occur if dibsdevadd fails during dibslodevprobe, leading to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Do not use DSISR for SLB faults. Since commit 46ddcb3950a2 “powerpc/mm: Show if a bad page fault on data is read or write”, we use pagefaultiswriteregs-dsisr in badpagefault to determine whether the fault is for a re...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Rejects adapter interrupt forwarding if it is already enabled. The MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: mtk-adsp: fixed a UAF use-after-free during device teardown. When the SOF audio driver fails to initialize e.g., due to a firmware boot timeout, its devices release the sndsofdev object that the mailbox client...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vdpa/octeonep: fixed the IRQ-to-ring mapping in the interrupt handler. Look up the IRQ index in octhw-irqs instead of assuming irqs0. This approach supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs0...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net:sfc: Fixed issues with non-freezed interrupts in legacy IRQ mode. The SFC driver can be configured using modparam to work with MSI-X, MSI, or legacy IRQ interrupts. In the latter case, the interrupt wasn’t properly released...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: sh: rz-dmac – Move the interrupt request after everything is set up. Once an interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is only...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fixed an out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmapaddirqchipfwnode, the intention is to allocate a matrix with numconfigbases rows and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/perf: Fixed powerpmudisable to call clearpmiirqpending only if PMI is pending. Running a self-test with CONFIGPPCIRQSOFTMASKDEBUG enabled in the kernel triggered the following warning: 172.851380 ------------ Cut here...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: Disabled the IRQ during suspension to fix an unhandled interrupt. When using WIFI out-of-band wakeup, a warning “irq xxx: nobody cared" occurs. This happens because the usdhc interrupt is not disabled during...

SUSE CVE-2026-74653

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

SUSE CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...