CVE-2026-62437

CVE-2026-62437 is a memory leak vulnerability in the Xen hypervisor's x86 device model (DM) path. During guest termination, PCI device cleanup removes IRQ tracking structures early in the process, but the guest's DM can subsequently re-establish those structures by re-binding IRQs , leaving at le...

x86: DMs may cause mem leak by IRQ binding

ISSUE DESCRIPTION When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that...

CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

Linux Distros Unpatched Vulnerability : CVE-2026-62437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated remova...

CVE-2026-62437: Concurrent Execution using Shared Resource with Improper Synchronization

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

PT-2026-87043

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

Linux Distros Unpatched Vulnerability : CVE-2026-80895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053155 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to...

Linux Distros Unpatched Vulnerability : CVE-2026-80743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data...

AZL-99077 CVE-2026-80743 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

CVE-2026-80743

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

UBUNTU-CVE-2026-80743

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

CVE-2026-80743

CVE-2026-80743 affects the Linux kernel's ASoC xilinx formatter_pcm driver . The root cause is a race condition: IRQ handlers call dev_get_drvdata() to retrieve driver data, but that data is only assigned at the end of the probe function—after devm_request_irq(). If an interrupt fires in that win...

CVE-2026-80743 ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

CVE-2026-80743 ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

EUVD-2026-70347

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

kernel: smc91x: fix broken irq-context in PREEMPT_RT

A locking context bug was found in the Linux kernel's smc91x Ethernet driver on PREEMPTRT kernels. The smcspecialtrylock function disables IRQs but smcspecialunlock does not properly restore IRQs on PREEMPTRT. This mismatch causes RCU read unlock to fail in devqueuexmit, triggering a "workqueue...

kernel: smc91x: fix broken irq-context in PREEMPT_RT

A locking context bug was found in the Linux kernel's smc91x Ethernet driver on PREEMPTRT kernels. The smcspecialtrylock function disables IRQs but smcspecialunlock does not properly restore IRQs on PREEMPTRT. This mismatch causes RCU read unlock to fail in devqueuexmit, triggering a "workqueue...

CVE-2026-80678

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...