Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tty: serial: imx: disable Ageing Timer interrupt request irq There might be pending USR interrupts before requesting the IRQ; however, uartaddoneport has not yet been executed, resulting in a kernel panic: 0.795668 Unable to hand...

SUSE CVE-2026-68202

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, then frees it. sndseqtimerclose clears q-timer-timeri. snduselocksync then drains borrowers, and sndseqtimerdelete frees q-timer. A...

CVE-2026-68200

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. A lack of serialization in the userspace-driven timer utimer TRIGGER ioctl allows two threads to concurrently call sndtimerinterrupt. This race condition can lead to a use-after-free vulnerability, wher...

CVE-2026-68200

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer utimer TRIGGER ioctl calls sndtimerinterrupt directly with no serialization, so two threads triggering the same utimer can run...

CVE-2026-68202

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, then frees it. sndseqtimerclose clears q-timer-timeri. snduselocksync then drains borrowers, and sndseqtimerdelete frees q-timer. A...

CVE-2026-68202 ALSA: seq: close a re-opened queue timer in the destructor

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, then frees it. sndseqtimerclose clears q-timer-timeri. snduselocksync then drains borrowers, and sndseqtimerdelete frees q-timer. A...

PT-2026-69600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA timer component. The userspace-driven timer utimer TRIGGER ioctl calls the snd timer interrupt function without serialization, allowing two...

SUSE-SU-2026:3409-1 Security update for xen

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: sched/fair: This bug prevents dead task groups from regaining access to cfsrq. Kevin is reporting crashes that indicate a use-after-free of cfsrq in the function updateblockedaverages. Initial debugging revealed that cfsrq...

SUSE CVE-2026-31574

In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the nexteventforced flag The prevention mechanism against timer interrupt starvation missed to reset the nexteventforced flag in a couple of places: - When the clock event state changes. That ca...

CVE-2026-31574

A flaw was found in the Linux kernel's clock event handling. Missing resets of a critical flag can lead to timer interrupt starvation and system stalls. This vulnerability could allow an attacker to cause a denial of service DoS by making the system unresponsive. Mitigation Mitigation for this...

EUVD-2026-25467

In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the nexteventforced flag The prevention mechanism against timer interrupt starvation missed to reset the nexteventforced flag in a couple of places: - When the clock event state changes. That ca...

CVE-2026-31574

CVE-2026-31574 concerns the Linux kernel clockevents subsystem. The issue arises from missing resets of the next_event_forced flag in several code paths, including during clock event state changes, when arming a non-forced event, and in the suspend wakeup handler. This can leave the flag stale ac...

CVE-2026-31574

In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the nexteventforced flag The prevention mechanism against timer interrupt starvation missed to reset the nexteventforced flag in a couple of places: - When the clock event state changes. That ca...

PT-2026-34926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the clockevents prevention mechanism against timer interrupt starvation occurs because the next event forced flag is not reset in certain scenarios. This failure happens when t...

CVE-2026-31574: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the nexteventforced flag The prevention mechanism against timer interrupt starvation missed to reset the nexteventforced flag in a couple of places: - When the clock event state changes. That ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000646)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000646 advisory. The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000760 advisory. sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kern...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002744 advisory. The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002666 advisory. The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to...