kernel: ALSA: timer: Forcibly close timer instances at closing

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. This vulnerability occurs when a timer object is freed while timer instances are still associated with it, particularly when userspace-driven timers are involved. A local user can exploit this by...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Cancel dqisyncwork before freeing oinfo. The ocfs2globalreadinfo function will initialize and schedule dqisyncwork at the end. If an error occurs after successfully reading the global quota, the following warning will be...

CVE-2026-12366

Summary: CVE-2026-12366 in Zephyr describes a use-after-free in the dynamic object disposal path for kernels objects. When a user-thread holds the last permission on a timer (K_OBJ_TIMER) and frees it, the timer’s memory is released without cancelling its embedded _timeout node from the global _t...

AZL-71260 CVE-2025-39833 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer With CONFIGDEBUGOBJECTSTIMERS unloading hfcpci module leads to the following splat: 250.215892 ODEBUG: assertinit not available active state 0 object: ffffffffc01a3dc0...