CVE-2026-64429 gpio: eic-sprd: use raw_spinlock_t in the irq startup path

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

CVE-2026-64429

CVE-2026-64429 affects the Spreadtrum EIC GPIO IRQ controller driver in the Linux kernel. The root cause is that sprd_eic_irq_unmask() calls sprd_eic_update(), which acquires a lock via spin_lock_irqsave(). On PREEMPT_RT kernels, a regular spinlock_t becomes a sleeping lock, but the code path is ...

EUVD-2026-48772

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428

CVE-2026-64428 affects the SCH GPIO controller (gpio:sch) in the Linux kernel. The root cause is that sch_irq_unmask() acquires sch->lock via spin_lock_irqsave(), which on PREEMPT_RT becomes a sleeping lock. This lock is reached from irq_startup(), a non-sleepable context, triggering a "sleepi...

CVE-2026-64428 gpio: sch: use raw_spinlock_t in the irq startup path

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428 gpio: sch: use raw_spinlock_t in the irq startup path

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which takes sch-lock with spinlockirqsave. The callback can be reached from...

EUVD-2026-48907

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...

CVE-2026-64292

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...

EUVD-2026-49004

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...

CVE-2026-64292 iommufd: Move vevent memory allocation outside spinlock

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...

CVE-2026-64292

CVE-2026-64292 : In the Linux kernel, the iommufd component is vulnerable due to veventq memory allocation happening inside a spinlock, enabling a local user to exhaust atomic memory reserves by creating large queues and trigger a DoS. The fix moves the veventq memory allocation outside the spinl...

CVE-2026-64292 iommufd: Move vevent memory allocation outside spinlock

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...

PT-2026-64649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the GPIO SCH controller where the sch irq unmask function enables the GPIO IRQ and updates the controller state via sch irq mask unmask. This process utilizes sch-lock...

Linux Distros Unpatched Vulnerability : CVE-2026-64292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happen...

PT-2026-64650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Spreadtrum EIC controller where the sprd eic irq unmask function enables the GPIO IRQ and updates the controller state via the sprd eic update function. The sprd e...

PT-2026-64513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the iommufd component, memory allocation for veventq occurs inside a spinlock. Because the queue depth is determined by user space, a user can allocate excessively large queues to...

Linux Distros Unpatched Vulnerability : CVE-2026-64428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: sch: use rawspinlockt in the irq startup path schirqunmask enables the GPIO IRQ and then updates the controller state through schirqmaskunmask, which take...

CVE-2026-64218

CVE-2026-64218 affects the Linux kernel’s batman-adv subsystem. The bug in batadv_bla_purge_backbone_gw() could leak or misuse report_work structures when purging stale backbone gateway entries. The root cause: a previous loop held entries under spin_lock_bh() and called cancel_work_sync(), which...

CVE-2026-64218 batman-adv: bla: fix report_work leak on backbone_gw purge

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix reportwork leak on backbonegw purge batadvblapurgebackbonegw removes stale backbone gateway entries, but fails to properly handle their associated reportwork: - If reportwork is running, the purge must wait f...