CVE-2026-89869 media: qcom: iris: use disable_irq() during power-off

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an already queued threaded IRQ handler to complete before returning. As a...

EUVD-2026-80469

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an already queued threaded IRQ handler to complete before returning. As a...

CVE-2026-89848 scsi: qla2xxx: Quiesce response IRQ before freeing request queue

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxxdeleteqpair deletes the request queue before the response queue. qla25xxdeletereqque frees the request queue memory kfreereq in qla25xxfreereqque, but the...

CVE-2026-89848 scsi: qla2xxx: Quiesce response IRQ before freeing request queue

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxxdeleteqpair deletes the request queue before the response queue. qla25xxdeletereqque frees the request queue memory kfreereq in qla25xxfreereqque, but the...

PT-2026-93605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the parisc eisa component where providing an invalid value through the eisa irq edge= kernel command line parameter causes the eisa irq setup function to enter an...

PT-2026-93648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pm8001 request msix function where the rollback loop uses an incorrect index when freeing MSI-X vectors after a request irq failure. Specifically, the loop utilize...

PT-2026-93510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iris vpu power off function where the use of disable irq nosync fails to wait for queued threaded IRQ handlers to complete before returning. This can lead to a...

PT-2026-93587

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC cs35l33 component where the cs35l33 runtime suspend function powers down the codec and enables regcache cache onlytrue without first quiescing the threaded IR...

CVE-2026-89980: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ sndharmonycreate registers the IRQ before initializing h-lock and h-mixerlock. A pending interrupt can invoke the handler while these locks are uninitialized. Initialize both...

CVE-2026-89946: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l33: drain threaded IRQ before runtime suspend cs35l33runtimesuspend currently switches the codec into regcachecacheonlytrue and powers it down without first quiescing the threaded IRQ registered by...

CVE-2026-89869: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an already queued threaded IRQ handler to complete before returning. As a...

PT-2026-93579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the atlas-sensor driver within the industrial I/O IIO chemical subsystem. The driver uses devm request threaded irq to request hardware data-ready...

PT-2026-93586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC cs35l34 driver where the cs35l34 runtime suspend function powers off the device and enables cache-only mode without first quiescing the threaded IRQ registere...

CVE-2026-89945: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l34: drain threaded IRQ before runtime suspend cs35l34runtimesuspend currently switches the codec into regcachecacheonlytrue, asserts reset low, and powers the device off without first quiescing the threaded IRQ...

PT-2026-93551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch KVM implementation where the vector variable is declared on the stack within the dmsintc inject irq function and may be used without being initialized...

Linux Distros Unpatched Vulnerability : CVE-2026-89946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: cs35l33: drain threaded IRQ before runtime suspend cs35l33runtimesuspend currently switches the codec into regcachecacheonlytrue and powers it down withou...

Linux Distros Unpatched Vulnerability : CVE-2026-90007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously registered handlers with freeirq when requestirq fails. The...

Linux Distros Unpatched Vulnerability : CVE-2026-89980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: harmony: initialize locks before requesting IRQ sndharmonycreate registers the IRQ before initializing h-lock and h-mixerlock. A pending interrupt can...

Linux Distros Unpatched Vulnerability : CVE-2026-89945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: cs35l34: drain threaded IRQ before runtime suspend cs35l34runtimesuspend currently switches the codec into regcachecacheonlytrue, asserts reset low, and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / Only IRQs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid / if 1 options1 & 0xdcfc However, it-optionsi is an...