Linux Distros Unpatched Vulnerability : CVE-2026-90432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't r...

DEBIAN-CVE-2026-90432

In the Linux kernel, the following vulnerability has been resolved: schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't run from NMI. The deferral is now unnecessary - claiming is NMI-safe a...

CVE-2026-90432

In the Linux kernel, the following vulnerability has been resolved: schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't run from NMI. The deferral is now unnecessary - claiming is NMI-safe a...

DEBIAN-CVE-2026-90247

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock leak in irqwork path stackmapgetbuildidoffset introduced a per-CPU irqwork to defer mmapreadunlock from NMI context, and bpffindvma later reused the same mmapunlockwork. Both callers only check whether the work ...

AZL-102864 CVE-2026-90247 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock leak in irqwork path stackmapgetbuildidoffset introduced a per-CPU irqwork to defer mmapreadunlock from NMI context, and bpffindvma later reused the same mmapunlockwork. Both callers only check whether the work ...

CVE-2026-90247

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock leak in irqwork path stackmapgetbuildidoffset introduced a per-CPU irqwork to defer mmapreadunlock from NMI context, and bpffindvma later reused the same mmapunlockwork. Both callers only check whether the work ...

CVE-2026-90432

CVE-2026-90432 affects the Linux kernel 's sched_ext (scheduler extension) subsystem. The vulnerability is in the hardlockup handler (scx_hardlockup()), which deferred the abort to an irq_work—originally needed because exit claiming required scx_sched_lock and couldn't run from NMI. Now that clai...

CVE-2026-90432 sched_ext: Abort directly from the hardlockup handler

In the Linux kernel, the following vulnerability has been resolved: schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't run from NMI. The deferral is now unnecessary - claiming is NMI-safe a...

CVE-2026-90432 sched_ext: Abort directly from the hardlockup handler

In the Linux kernel, the following vulnerability has been resolved: schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't run from NMI. The deferral is now unnecessary - claiming is NMI-safe a...

EUVD-2026-82093

In the Linux kernel, the following vulnerability has been resolved: schedext: Abort directly from the hardlockup handler scxhardlockup defers the abort to an irqwork because exit claiming used to take scxschedlock and couldn't run from NMI. The deferral is now unnecessary - claiming is NMI-safe a...

EUVD-2026-81840

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock leak in irqwork path stackmapgetbuildidoffset introduced a per-CPU irqwork to defer mmapreadunlock from NMI context, and bpffindvma later reused the same mmapunlockwork. Both callers only check whether the work ...

CVE-2026-90247

CVE-2026-90247 affects the Linux kernel BPF subsystem . The vulnerability resides in the per-CPU mmap_unlock_work irq_work slot shared by stack_map_get_build_id_offset() and bpf_find_vma(). Because both callers only check whether the work is busy before taking mmap_lock, a nested caller can reuse...

CVE-2026-90247 bpf: Fix mmap_lock leak in irq_work path

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock leak in irqwork path stackmapgetbuildidoffset introduced a per-CPU irqwork to defer mmapreadunlock from NMI context, and bpffindvma later reused the same mmapunlockwork. Both callers only check whether the work ...

CVE-2026-90247 bpf: Fix mmap_lock leak in irq_work path

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmaplock leak in irqwork path stackmapgetbuildidoffset introduced a per-CPU irqwork to defer mmapreadunlock from NMI context, and bpffindvma later reused the same mmapunlockwork. Both callers only check whether the work ...

AZL-101132 CVE-2026-89938 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

CVE-2026-89938

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

DEBIAN-CVE-2026-89938

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

CVE-2026-89938 iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

CVE-2026-89938

CVE-2026-89938 is a use-after-free (UAF) in the Linux kernel's IIO chemical atlas-sensor driver. When the driver is removed, the devm-managed IRQ is freed via free_irq() during the devres unwind, but a pending irq_work (atlas_work_handler) is not flushed first. If a buffer is enabled, the handler...

CVE-2026-89938 iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...