USN-9020-1 linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0, linux-gcp-7.0, linux-gke, linux-oracle-7.0, linux-realtime vulnerabilities

It was discovered that the iouring subsystem in the Linux kernel contained a memory leak when handling certain asynchronous commands. A local attacker could possibly use this to cause a denial of service memory exhaustion. CVE-2026-80811 It was discovered that the iouring subsystem in the Linux...

USN-9020-1: Linux kernel vulnerabilities

It was discovered that the iouring subsystem in the Linux kernel contained a memory leak when handling certain asynchronous commands. A local attacker could possibly use this to cause a denial of service memory exhaustion. CVE-2026-80811 It was discovered that the iouring subsystem in the Linux...

USN-9019-1: Linux kernel (Azure) vulnerabilities

It was discovered that the iouring subsystem in the Linux kernel contained a memory leak when handling certain asynchronous commands. A local attacker could possibly use this to cause a denial of service memory exhaustion. CVE-2026-80811 It was discovered that the iouring subsystem in the Linux...

CVE-2026-90585

The Renesas RA SCI UART driver's receive-error ISR, uartrascieriisr in drivers/serial/uartrenesasrasci.c, acknowledged the error condition only when a Zephyr interrupt-driven callback had already been registered. With CONFIGUARTINTERRUPTDRIVEN=y and CONFIGUARTASYNCAPI=n, if data-usercb is NULL th...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Mark the I2C adapter as suspended when hardware is powered down On some i.MX platforms, certain I2C client drivers maintain a periodic workqueue that continues to trigger I2C transfers. During system suspend/resume, the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

CVE-2026-99202

A flaw was found in the Linux kernel's libsas subsystem, leading to a denial of service DoS. When resuming a host adapter connected to an expander-attached storage drive, an internal deadlock condition can occur while executing management commands. A local user can trigger this vulnerability duri...

CVE-2026-80808

A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability occurs in the ext4xattrblockset function, where an indefinite retry loop can be triggered when handling saturated extended attribute xattr cache entries, especially in the presence of a corrupted filesystem. A local attack...

CVE-2026-98004

A flaw was found in the Linux kernel's RISC-V IOMMU Input-Output Memory Management Unit driver. A local user can exploit this vulnerability to cause a Denial of Service DoS on systems running RISC-V architecture. A concurrency issue in how commands are published to the hardware queue allows lock...

K000164033: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46142 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It stems from dwmac1000 failing to clear RGMII state interrupts, which can lead to an interrupt storm caused by pending interrupt states. This prevents recovery threads from running, potentially resulting in soft lockouts, watchdog...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143052)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143052 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based interrupts The current implementation only calls...

CVE-2026-93184

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Freescale Audio Mixer fslaudmix driver in the Linux kernel. During the driver's initialization probe phase, the audio mixer hardware is powered off after runtime power management is enabled. Subsequent attempts to...

CVE-2026-93097

A flaw was found in the Linux kernel's CXL mailbox cxl/mbox component. A malicious or malfunctioning device could exploit a vulnerability where an empty payload with a specific flag causes an infinite loop. This issue can lead to a system hang, preventing further poison operations and resulting i...

CVE-2026-98478

A flaw was found in the Linux kernel's Universal Flash Storage UFS driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition can result in an unrecoverable circular wait deadlock, leadi...

CVE-2026-90370

A flaw was found in the kernel. Specifically, within the mt76 Wi-Fi driver's mt7996mcugetchipconfig function, a malformed firmware response containing a zero-length Type-Length-Value TLV could cause an infinite loop. This issue occurs during device initialization and can lead to a system hang,...

Siemens SIMATIC S7-1500 TM MFP Deadlock (CVE-2026-23157)

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

CVE-2026-98521

A flaw was found in the Linux kernel's i915 graphics driver. When a graphics buffer object is concurrently destroyed while its busy status is being queried, an improper teardown sequence can cause the driver to restart its iteration indefinitely. A local attacker can exploit this race condition t...

CVE-2026-98439

A flaw was found in the Linux kernel's Server Message Block SMB server, ksmbd. When a connection is closed while an asynchronous request is still waiting, the server fails to cancel active requests before waiting for them to complete. A remote client could exploit this flaw to prevent the...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...