Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.12.101, 6.18.42, and 7.1.6 contain security vulnerabilities. This vulnerability arises from the fact that the jumplabelinit function is not called before parseearlyparam. Early parameter handlers may modify static keys using staticbranchenable/disable, whic...

CVE-2026-31551

The CVE-2026-31551 entry relates to the Linux kernel mac80211 wifi subsystem. A race in aql_enable_write() during concurrent debugfs writes can cause a static_branch_dec() underflow because the code checks static_key_false(&aql_disable.key) and then later increments/decrements the static branch, ...

CVE-2022-50091 locking/csd_lock: Change csdlock_debug from early_param to __setup

In the Linux kernel, the following vulnerability has been resolved: locking/csdlock: Change csdlockdebug from earlyparam to setup The csdlockdebug kernel-boot parameter is parsed by the earlyparam function csdlockdebug. If set, csdlockdebug invokes staticbranchenable to enable csdlockwait feature...

CVE-2022-50091

CVE-2022-50091 concerns the Linux kernel where the boot-time parameter csdlock_debug was parsed via early_param, enabling static_branch in a manner that could dereference NULL under specific sparse memory configurations (arm64 with CONFIG_SPARSEMEM and SPARSEMEM_VMEMMAP settings, and powerpc due ...

CVE-2022-50091 locking/csd_lock: Change csdlock_debug from early_param to __setup

In the Linux kernel, the following vulnerability has been resolved: locking/csdlock: Change csdlockdebug from earlyparam to setup The csdlockdebug kernel-boot parameter is parsed by the earlyparam function csdlockdebug. If set, csdlockdebug invokes staticbranchenable to enable csdlockwait feature...