CVE-2026-64211

In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an srcustruct structure is in the midst of switching from CPU-0 to all-CPUs state, it can attempt to invoke callbacks for CPUs that have never been online. Worse yet...

UBUNTU-CVE-2026-64248

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

CVE-2026-64250

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-64250 LoongArch: Report dying CPU to RCU in stop_this_cpu()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-64250

CVE-2026-64250 affects the Linux kernel on LoongArch. The issue arises when smp_send_stop() parks secondary CPUs and marks them offline without informing RCU, causing RCU to expect quiescent states from CPUs that are effectively stopped. This can lead to RCU grace period stalls, especially after ...

CVE-2026-64250 LoongArch: Report dying CPU to RCU in stop_this_cpu()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-64248

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

CVE-2026-64248

CVE-2026-64248 affects the Linux kernel on MIPS (Realtek MIPS interAptiv). The issue arises in smp_send_stop() which parks secondary CPUs and marks them offline via set_cpu_online(false) without informing RCU, causing RCU to still expect a quiescent state. This can lead to a stall when irq_work_s...

CVE-2026-64248 MIPS: smp: report dying CPU to RCU in stop_this_cpu()

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

EUVD-2026-48657

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

CVE-2026-64211

The CVE-2026-64211 entry concerns the Linux kernel, specifically Tree SRCU behavior during CPU online/offline transitions. The concrete issue is that, while an srcu_struct is switching to an all-CPUs state, callbacks could be invoked for CPUs that have never been online or may never come online (...

PT-2026-64365

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stop this cpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stop this cpu". smp send stop parks all secondary CPUs in stop this cpu. And the function...

PT-2026-64363

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop this cpu smp send stop parks all secondary CPUs in stop this cpu. The function marks the CPU offline for the scheduler via set cpu onlinefalse but never informs RCU, so RCU keeps expecti...

SUSE CVE-2026-64015

In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls assocarrayfind in findkeytoupdate without holding the RCU read lock, while the assocarraygc code really is designed around...

SUSE CVE-2026-64075

In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregisterfprobe to wait for RCU grace period Commit 4346ba1604093 "fprobe: Rewrite fprobe on function-graph tracer" changed fprobe to register struct fprobe to an rcu-hlist, but it forgot to wait for RCU GP. Thus the...

CVE-2026-64075

A flaw was found in the Linux kernel's fprobe mechanism. The 'unregisterfprobe' function did not properly wait for the RCU Read-Copy-Update grace period, which is a synchronization mechanism. This oversight could lead to a use-after-free vulnerability, where memory is deallocated while still bein...

CVE-2026-64188

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoint from the hash table with hlistdelinitrcu and then immediately frees it with kfree. However, RCU readers on the receive path...

CVE-2026-64188 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoint from the hash table with hlistdelinitrcu and then immediately frees it with kfree. However, RCU readers on the receive path...

Linux Distros Unpatched Vulnerability : CVE-2026-64119

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-64123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcureadlock. They walk hsr-nodedb...