CVE-2026-64563_EXP

CVE-2026-64563EXP 仅供实验研究，prefetch和nperm的代码（需要设置的内存参考set.gdb）未附加，未进行优化命中概率低 作者关注到该漏洞作者已发布该漏洞相关信息：https://github.com/google/security-research/pull/414 利用思路截然不同，由于未完整验证该利用思路持保守意见（主要是sock自旋锁是否能竞态作者并未实测，按照代码片面理解可以通过timerfd硬中断进行竞态） 前置分析：https://xz.aliyun.com/news/92649...

CVE-2026-89491

A flaw was found in the Linux kernel's ocfs2 cluster module. This vulnerability allows a local attacker to trigger a denial of service. The issue arises when a sleeping function is called while a spinlock is held within the o2hbregionpin function, which can lead to a system crash or deadlock. Thi...

CVE-2026-89589

A flaw was found in the ACPI/APEI/GHES component of the Linux kernel. Incorrect usage of spinlocks in the CXL CPER work registration and unregistration helpers can lead to a deadlock. If a CPU holds a lock while a GHES interrupt arrives on the same CPU, the interrupt handler will spin on the held...

CVE-2026-89514

A flaw was found in the Linux kernel's Fibre Channel over Ethernet Network Interface Card fnic driver. The fnicfcoeprocessvlanresp function attempts to allocate memory in a way that can cause the system to sleep while holding a spinlock. This incorrect memory allocation in an atomic context can...

CVE-2026-89667

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89589

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

CVE-2026-89514

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFPATOMIC for VLAN alloc under spinlock fnicfcoeprocessvlanresp allocates a VLAN descriptor with kzallocobj default GFPKERNEL while holding vlanslock via spinlockirqsave. GFPKERNEL may sleep, which is not allowed ...

CVE-2026-89491

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...

CVE-2026-80953

In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI state, transfer queue list and transfer queue lock are initialized. A...

CVE-2026-89589 acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

CVE-2026-89589

CVE-2026-89589 affects the Linux kernel in the acpi/apei/ghes subsystem, specifically the CXL CPER work registration and unregistration helpers. The root cause is a deadlock : the CXL CPER work locks are acquired with a regular spinlock guard (interrupts enabled) in register/unregister paths, whi...

CVE-2026-89547

This Linux kernel vulnerability affects the SUNRPC subsystem. __svc_create() initializes three per-pool percpu_counter stats but ignores all return values from percpu_counter_init(). On SMP systems, a failed per-cpu allocation leaves the counter's backing pointer NULL while the half-constructed s...

CVE-2026-89514 scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFPATOMIC for VLAN alloc under spinlock fnicfcoeprocessvlanresp allocates a VLAN descriptor with kzallocobj default GFPKERNEL while holding vlanslock via spinlockirqsave. GFPKERNEL may sleep, which is not allowed ...

EUVD-2026-76420

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFPATOMIC for VLAN alloc under spinlock fnicfcoeprocessvlanresp allocates a VLAN descriptor with kzallocobj default GFPKERNEL while holding vlanslock via spinlockirqsave. GFPKERNEL may sleep, which is not allowed ...

CVE-2026-89514

In the Linux kernel , the scsi: fnic driver's fnic_fcoe_process_vlan_resp() function allocates a VLAN descriptor using kzalloc_obj() with the default GFP_KERNEL flag while holding vlans_lock via spin_lock_irqsave(). Since GFP_KERNEL may sleep, this is invalid in the atomic context and can trigger...

EUVD-2026-76397

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...

CVE-2026-89491 ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...

CVE-2026-89491

CVE-2026-89491 affects the OCFS2 cluster subsystem in the Linux kernel. The o2hb_region_pin() function is called while holding the o2hb_live_lock spinlock, yet it invokes configfs_depend_item(), which sleeps by taking the configfs root inode rwsem and pinning the filesystem. Under CONFIG_DEBUG_AT...

EUVD-2026-76276

In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI state, transfer queue list and transfer queue lock are initialized. A...

PT-2026-90305

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw spinlock t for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxl cper work lock and cxl cper prot err work lock with a spinlock guard, which leaves local interrupts...