CVE-2026-93184

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Freescale Audio Mixer fslaudmix driver in the Linux kernel. During the driver's initialization probe phase, the audio mixer hardware is powered off after runtime power management is enabled. Subsequent attempts to...

CVE-2026-93097

A flaw was found in the Linux kernel's CXL mailbox cxl/mbox component. A malicious or malfunctioning device could exploit a vulnerability where an empty payload with a specific flag causes an infinite loop. This issue can lead to a system hang, preventing further poison operations and resulting i...

CVE-2026-98478

A flaw was found in the Linux kernel's Universal Flash Storage UFS driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition can result in an unrecoverable circular wait deadlock, leadi...

CVE-2026-90370

A flaw was found in the kernel. Specifically, within the mt76 Wi-Fi driver's mt7996mcugetchipconfig function, a malformed firmware response containing a zero-length Type-Length-Value TLV could cause an infinite loop. This issue occurs during device initialization and can lead to a system hang,...

Siemens SIMATIC S7-1500 TM MFP Deadlock (CVE-2026-23157)

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

CVE-2026-98521

A flaw was found in the Linux kernel's i915 graphics driver. When a graphics buffer object is concurrently destroyed while its busy status is being queried, an improper teardown sequence can cause the driver to restart its iteration indefinitely. A local attacker can exploit this race condition t...

CVE-2026-98439

A flaw was found in the Linux kernel's Server Message Block SMB server, ksmbd. When a connection is closed while an asynchronous request is still waiting, the server fails to cancel active requests before waiting for them to complete. A remote client could exploit this flaw to prevent the...

CVE-2026-98798

The Linux kernel contains a NULL dereference vulnerability in the bcmgenet driver. The issue occurs because the Rx ring priv and index are only initialized during the open operation. If a user attempts to set Rx coalescing parameters—for example, using ethtool -C eth0 rx-usecs 50—on an interface ...

CVE-2026-98798 net: bcmgenet: fix NULL dereference in set_coalesce before first open

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL dereference in setcoalesce before first open The Rx ring priv and index are only set in bcmgenetinitrxring, which runs at open. Setting the Rx coalescing parameters on an interface that was never opened,...

CVE-2026-98798 net: bcmgenet: fix NULL dereference in set_coalesce before first open

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL dereference in setcoalesce before first open The Rx ring priv and index are only set in bcmgenetinitrxring, which runs at open. Setting the Rx coalescing parameters on an interface that was never opened,...

PT-2026-117017

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL dereference in set coalesce before first open The Rx ring priv and index are only set in bcmgenet init rx ring, which runs at open. Setting the Rx coalescing parameters on an interface that was never opene...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in the Linux kernel, where the non-blocking socket operation in llcpsockconnect leads to a leak and ultimately causes the system to hang...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed a system hang that occurred during resume with a Thunderbolt monitor. Why This issue arises when using a Thunderbolt monitor and performing suspend or resume operations. During the resume procedure, the TBT...

CVE-2026-90323

A flaw was found in the Linux kernel's ublk subsystem. When the automatic buffer registration feature is active, an invalid buffer address can be processed, causing a command to complete while its associated tag remains active. This can lead to a system hang during resource teardown, allowing a...

CVE-2026-89867

A flaw was found in the Linux kernel's media subsystem, specifically within the chips-media wave5 driver. This vulnerability occurs when multiple video decoder instances share a video processing unit VPU and a job slot is not properly released during the draining process, particularly if a decode...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: pinctrl: ocelot: fixed a system hang on level-based interrupts The current implementation only calls chainedirqenter and chainedirqexit if it detects pending interrupts. However, in cases where GPIO pins are configured in leve...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not strictly require a dirty metadata threshold for metadata writepages. BUG There is an internal report indicating that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system ha...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nilfs2: A potential block overflow issue that could cause system hangs has been fixed. When a user executes the FITRIM command, a underflow can occur when calculating nblocks, if the endblock is too small. Since nblocks is of the...

CVE-2026-97498

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Memory queue and firmware buffer objects used by user queues were not pinned in memory, allowing them to be evicted during memory pressure. A local user could exploit this issue to cause the graphics hardware to access invalid memory...

CVE-2026-97411

A flaw was found in the Linux kernel's IBM EMAC network driver. During module removal, the driver unconditionally attempts to disable network polling routines even if they were never enabled or were already stopped. This improper state handling causes the kernel to enter an infinite loop, resulti...