Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed NULL pointer dereferencing in bpftaskfromvpid. bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid: c findtaskbyvpidvpid findtaskbypidnsvpid, taskactivepidnscurrent...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: Replace direct dequeue call with peek and qdiscdequeuepeeked When taprio’s software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gsoskb; tapriodequeuefromtxq then tak...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpfbtffindbynamekind as sleepable When bpfbtffindbynamekind finds a type in module BTF, it returns a new BTF object fd via btfnewfd. This object is then passed to anoninodegetfd, which can sleep while allocating or...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manage DMA descriptors For architectures such as Microblaze or arm64 where this IP is used, DMADIRECTREMAP is enabled, meaning that dmaalloccoherent may remap and thus valloc some memory...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

UBUNTU-CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

CVE-2026-118593

A flaw exists in Red Hat Enterprise Linux 9 kernel builds (specifically versions 9.6 through 9.10) due to an incomplete backport of the CVE-2026-46099 fix. The vulnerability is caused by a local_bh imbalance in the seg6_input_core() function, where the drop path returns while bottom halves remain...

CVE-2026-118593 Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

EUVD-2026-113734

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

CVE-2026-118593 Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

Linux Distros Unpatched Vulnerability : CVE-2026-118593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance...

CVE-2026-118593: Red Hat: A flaw was found in Red Hat Enterprise Linux 9 kernel builds

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

PT-2026-133298

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local bh imbalance in seg6 input core, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of...

SUSE CVE-2026-98967

In the Linux kernel, the following vulnerability has been resolved: cxgb4/chktls: disable softirqs around tidlist erases chcrktlscplactopenrpl inserts into tidlist from the receive path using xainsertbh. The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However,...

CVE-2026-80766

A flaw was found in the Linux kernel's Human Interface Device HID uclogic driver. During the removal of a uclogic device, a timing issue allows the inrangetimer to be re-armed after it has been cancelled. This can lead to the timer attempting to access memory that has already been freed, resultin...

SUSE CVE-2026-98986

In the Linux kernel, the following vulnerability has been resolved: namespace: remove the fsnotify marks of a mount namespace in process context mntnsrelease drops the last passive reference of a mount namespace and removes its fanotify marks via fsnotifymntnsdelete. That takes the mutex of every...

CVE-2026-98986

In the Linux kernel, the following vulnerability has been resolved: namespace: remove the fsnotify marks of a mount namespace in process context mntnsrelease drops the last passive reference of a mount namespace and removes its fanotify marks via fsnotifymntnsdelete. That takes the mutex of every...

DEBIAN-CVE-2026-98986

In the Linux kernel, the following vulnerability has been resolved: namespace: remove the fsnotify marks of a mount namespace in process context mntnsrelease drops the last passive reference of a mount namespace and removes its fanotify marks via fsnotifymntnsdelete. That takes the mutex of every...