CVE-2025-71089

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing SVA implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and...

RHSA-2026:0643 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:0576 Red Hat Security Advisory: kernel security update

Bulletin has no description...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002616 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002831 advisory. The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve'ed with 1GB of arguments or environmental strings the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002744 advisory. The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003530 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001841 advisory. The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003198 advisory. An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service out-of- bounds memory access and BUG can occur for a modified f2fs...

RHSA-2026:0535 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:0532 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:0457 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:0453 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set

In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIGX86 is set Patch series "Fix stale IOTLB entries for kernel address space", v7. This proposes a fix for a security vulnerability related to IOMMU Shared Virtual Addressing SVA. In an SVA context, an...

CVE-2025-71090

The CVE-2025-71090 entry concerns a Linux kernel vulnerability in the NFS server (nfsd). The issue is a reference-leak in nfsd4_add_rdaccess_to_wrdeleg(): fp->fi_fds[O_RDONLY] is overwritten with a newly acquired nfsd_file without releasing the prior reference if SHARE_ACCESS_READ exists, and ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcrrt5651 – Fixed invalid quirk input mapping. When an invalid value is passed via the quirk option, the bytcrrt5640 driver currently simply ignores it and leaves it unchanged. This may lead to unexpected results,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: pinctrl: Check the return value of pinmuxops::getfunctionname. While the API contract in the documentation does not specify this explicitly, the generic implementation of the getfunctionname callback from struct pinmuxops –...

RHEL 8 : kernel (RHSA-2026:0444)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0444 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: rc: fix races with...

kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue

A flaw was discovered in the Bluetooth subsystem of the Linux kernel. When processing a HCIEVNUMCOMPPKTS event, the function hciconntxdequeue did not properly hold or release the hdev device lock, which may lead to a use-after-free of the connection structure...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...