CVE-2026-62437

A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...

DEBIAN-CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

CVE-2026-62437 x86: DMs may cause mem leak by IRQ binding

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

EUVD-2026-72719

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

CVE-2026-62437

CVE-2026-62437 is a memory leak in the Xen hypervisor (x86) involving device model (DM) IRQ tracking structures . When a guest is terminated, PCI device and IRQ tracking cleanup occurs early; however, the guest's DM can re-establish tracking structures by binding IRQs anew, and at least one struc...

x86: DMs may cause mem leak by IRQ binding

ISSUE DESCRIPTION When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that...

Linux Distros Unpatched Vulnerability : CVE-2026-62437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated remova...

PT-2026-87043

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

Linux Distros Unpatched Vulnerability : CVE-2026-80895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053155 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to...

Linux Distros Unpatched Vulnerability : CVE-2026-80743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data...

CVE-2026-80743

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

UBUNTU-CVE-2026-80743

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

AZL-99077 CVE-2026-80743 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

CVE-2026-80743

CVE-2026-80743 affects the Linux kernel's ASoC xilinx formatter_pcm driver . The root cause is a race condition: IRQ handlers call dev_get_drvdata() to retrieve driver data, but that data is only assigned at the end of the probe function—after devm_request_irq(). If an interrupt fires in that win...

CVE-2026-80743 ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

EUVD-2026-70347

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

CVE-2026-80743 ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

kernel: smc91x: fix broken irq-context in PREEMPT_RT

A locking context bug was found in the Linux kernel's smc91x Ethernet driver on PREEMPTRT kernels. The smcspecialtrylock function disables IRQs but smcspecialunlock does not properly restore IRQs on PREEMPTRT. This mismatch causes RCU read unlock to fail in devqueuexmit, triggering a "workqueue...