Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: schedext: Call cgrouplock first in scxcgrouplock scxcgrouplock writes scxcgroupopsrwsem and then calls cgrouplock, which can lead to a deadlock via kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: waits for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; thus, if the device is unplugged...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: kernfs: A use-after-free issue has been fixed in kernfsremove. Syzkaller managed to trigger concurrent calls to kernfsremovebynamens for the same file, resulting in a KASAN detected use-after-free. This race condition occurs...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroupgetfromid must check whether the lookup key is a directory. Cgroups must be one of the kernfs directories; otherwise a kernel panic occurs, especially when a cgroup ID is provided from userspace...

CLEANSTART-2026-LS90448 In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file

Security vulnerability affects the openjdk11 package. In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file...

PT-2026-122328

Security vulnerability affects the openjdk11 package. In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file...

CVE-2026-89722

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pciwritelegacyio pciwritelegacyio loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; return...

CVE-2026-89722

CVE-2026-89722 is an out-of-bounds read in the Linux kernel's PCI/sysfs subsystem, specifically in pci_write_legacy_io(). The function unconditionally loaded a 4-byte (u32) value from the kernfs write buffer regardless of the actual write size (1, 2, or 4 bytes). Since kernfs_fop_write_iter() all...

CVE-2026-89722: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pciwritelegacyio pciwritelegacyio loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; return...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107294 advisory. In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at...

PT-2026-96606

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci write legacy io pci write legacy io loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; retur...

SUSE CVE-2026-74343

In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with different namespaces can share the same kernfsnode when kernfstestsuper finds a matching root but different namespace. This means multiple inode...

SUSE CVE-2026-74342

In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 "simpexattr: use per-sb cache", kernfsxattrset and kernfsxattrget compute the cache via kernfsrootkn before any other check. kernfsrootkn walks...

SUSE CVE-2026-68456

In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; so, if the device is unplugged...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: kernfs: Fixed the race condition involving multiple superblocks. Multiple superblocks with different namespaces can share the same kernfsnode when kernfstestsuper finds a matching root but different namespaces. This means that...

CVE-2026-74593: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...

PT-2026-79598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the sched ext component when scx cgroup lock acquires a write-lock on scx cgroup ops rwsem before taking the cgroup lock. This sequence creates a circular...

CVE-2026-74593: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...

CVE-2026-74343

A flaw was found in the Linux kernel's kernfs component. Multiple superblocks with different namespaces can share the same kernfsnode, leading to a race condition during extended attribute xattr operations. The Virtual File System VFS layer's per-inode locks are insufficient to serialize concurre...

CVE-2026-74342

A flaw was found in the Linux kernel's kernfs file system. This vulnerability allows a local attacker to cause a Denial of Service DoS by triggering a NULL pointer dereference. The issue occurs when the kernfs security initialization hook is invoked before critical parent node information is...