Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053264 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core.c unconditionally...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mtd: rawnand: brcmnand: fixed the PM resume warning The warning during PM resume was fixed as shown below, due to an uninitialized struct nandoperation that checks the chip select field: WARNONop-cs = nanddevntargets&chip-base...

CVE-2026-72332

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctxsyncdebugbo amdxdnahwctxsyncdebugbo invokes the hardware hwctxsyncdebugbo callback while holding xdna-devlock. The callback may call amdxdnacmdsubmit, which in turn calls...

CVE-2026-72332

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctxsyncdebugbo amdxdnahwctxsyncdebugbo invokes the hardware hwctxsyncdebugbo callback while holding xdna-devlock. The callback may call amdxdnacmdsubmit, which in turn calls...

AZL-91331 CVE-2026-53297 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard manaremove against double invocation If PM resume fails e.g., manaattach returns an error, manaprobe calls manaremove, which tears down the device and sets gd-gdmacontext = NULL and gd-driverdata = NULL. However,...

CVE-2026-43004

In the Linux kernel, CVE-2026-43004 affects the stm32-ospi driver. The root cause was a premature exit in the remove() callback when pm_runtime_resume_and_get() failed, causing cleanup of the SPI controller and other resources to be skipped. The fix removes the early return so cleanup always comp...

EUVD-2025-14152

Malicious code in bioql PyPI...

CVE-2025-39831

In the Linux kernel, the following vulnerability has been resolved: fbnic: Move phylink resume out of servicetask and into open/close The fbnic driver was presenting with the following locking assert coming out of a PM resume: 42.208116 T164 RTNL: assertion failed at drivers/net/phy/phylink.c 261...

CVE-2025-37840

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...

CVE-2025-37840 mtd: rawnand: brcmnand: fix PM resume warning

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...

CVE-2025-37840 mtd: rawnand: brcmnand: fix PM resume warning

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...

CVE-2025-37840

CVE-2025-37840 concerns the Linux kernel MTD NAND code, specifically brcmnand, where a PM-resume path could trigger a WARN due to an uninitialized nand_operation that checks the chip select. The connected advisories confirm this as a fix: during platform suspend/resume, the code now calls a highe...

CVE-2025-37840

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...

CVE-2024-40926

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-40926

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-27004 clk: Get runtime PM before walking tree during disable_unused

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disableunused Doug reported 1 the following hung task: INFO: task swapper/0:1 blocked for more than 122 seconds. Not tainted 5.15.149-21875-gf795ebc40eb8 1 "echo 0...