Linux Distros Unpatched Vulnerability : CVE-2026-64213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware...

CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

EUVD-2026-48621

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

PT-2026-64328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the lm90 alert function, which executes in the smbus alert context. The function calls lm90 update confreg to disable the hardware alert line without acquiring...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: md: initbioset in mddevinit. IO operations may be required before mdrun, such as updating metadata after writing to sysfs. Without bioset, this triggers a NULL pointer dereference, as shown below: BUG: NULL pointer dereference in...

CVE-2025-68368 md: init bioset in mddev_init

In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddevinit IO operations may be needed before mdrun, such as updating metadata after writing sysfs. Without bioset, this triggers a NULL pointer dereference as below: BUG: kernel NULL pointer dereference, addres...

SUSE CVE-2025-38705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerprofilemode for the CUSTOM profile will result in a null pointer dereference...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: safesetid: Check the size of policy writes. syzbot attempts to write a buffer with a large size to a sysfs entry. The writing is handled by handlepolicyupdate, which triggers a warning in kmalloc. Check the size specified for the...