PT-2026-116829

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch hfsc: bound the classify inner-filter walk with a drift budget hfsc classify applies the "filter may only point downwards" level check only when the filter result carries no bound class. A filter created with a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fixed a null dereference in aggdequeue. To prevent a potential crash in aggdequeue when cl-qdisc-ops-peekcl-qdisc returns NULL, we check the returned value before using it, similar to the existing approach in...

Astra Linux – Vulnerability in libxml2

A vulnerability was discovered in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to create a malicious XML input file that can cause libxml to crash, resulting in a denial of service or other undefined...

PT-2026-98759

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ipv6 srh rcv function where the network header is not correctly restored before routing and forwarding. When segments left is greater than 0, the function...

PT-2026-94419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch teql scheduler where the teql master xmit function sets the skb-dev variable to a slave device before calling ndo start xmit, but fails to restore it if the...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: Fixed the logic for accounting bulk flows in order to ensure host fairness. In schcake, we keep track of the number of active bulk flows per host. This is done when running in the dst/src host fairness mode, which...

SUSE CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

AZL-93617 CVE-2026-64428 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

UBUNTU-CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428 gpio: sch: use raw_spinlock_t in the irq startup path

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

EUVD-2026-48772

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428

CVE-2026-64428 affects the SCH GPIO controller (gpio:sch) in the Linux kernel. The root cause is that sch_irq_unmask() acquires sch->lock via spin_lock_irqsave(), which on PREEMPT_RT becomes a sleeping lock. This lock is reached from irq_startup(), a non-sleepable context, triggering a "sleepi...

PT-2026-64649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the GPIO SCH controller where the sch irq unmask function enables the GPIO IRQ and updates the controller state via sch irq mask unmask. This process utilizes sch-lock...

PT-2026-122487

Уязвимость функции cake calc overhead компонента net/sched/sch cake.c ядра операционной системы Linux связана с возможностью целочисленного переполнения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2026-120402

Уязвимость компонента net/sched/sch teql.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

Siemens RUGGEDCOM ROX Out-of-bounds Read (CVE-2025-49796)

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined...

PT-2026-72703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch codel component of the network scheduler. When dropping packets during a peek operation, the system calls the qdisc tree reduce backlog function before restori...

PT-2026-116279

Уязвимость функции update vf компонента net/sched/sch hfsc.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2026-116270

Уязвимость компонента net/sched/sch codel.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...