AZL-97788 CVE-2026-80560 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

UBUNTU-CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560

This Linux kernel vulnerability affects the OpenRISC (or1k) architecture signal handling path. The function restore_sigcontext() copies the entire supervision register (SR) from a user-controlled signal frame and only clears the SPR_SR_SM bit before reloading it into hardware. All other privilege...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104559 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098676 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump...

Linux Distros Unpatched Vulnerability : CVE-2026-80560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clea...

PT-2026-82181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto qce component where the error path in the devm qce register algs function is handled incorrectly. If the ops-register algs function fails, the system...

PT-2026-82176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the restore sigcontext function where the supervision register SR is copied from the signal frame without properly clearing privileged bits before returning to user...

CVE-2026-72699: Observable Discrepancy

The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...

The vulnerability of the poly1305_blocks_arch() function in the lib/crypto/arm64/poly1305-glue.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the poly1305blocksarch function in the lib/crypto/arm64/poly1305-glue.c module of the Linux operating system is related to an attempt to read inaccessible registers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-74733

A flaw was found in the Linux kernel's gpio: pca953x driver, which manages General Purpose Input/Output GPIO expanders. The driver uses its own locking mechanism, but the pca953xirqbussyncunlock function failed to acquire the necessary lock when performing register operations. This oversight coul...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: coresight: syscfg: Fixed a memory leak that occurred during registration failures in cscfgcreatedevice. deviceregister calls deviceinitialize. According to the documentation for deviceinitialize: “Use putdevice to release the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Thermal: Core – The putdevice function should only be called after deviceregister fails. putdevice should not be called before a previous call to deviceregister. thermalcoolingdeviceregister does not follow this principle...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mISDN: fixed an issue involving misuse of putdevice in mISDNregisterdevice. We should not release references to putdevice before calling deviceinitialize...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Preserve pointer spill metadata during half-slot cleanup The cleanfuncstate function cleans dead stack slots in 4-byte halves. When the high half of a STACKSPILL slot is dead and the low half remains alive, cleanup converts...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Resetting the register bounds before narrowing the RETVAL range in checkmemaccess When the BPF verifier processes a context load of an LSM hook return value, it calls markregs32range to narrow the register to the hook’s vali...