Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fixed a use-after-free caused by cyclic delayed work. The origin code calls canceldelayedwork in ocelotstatsdeinit to cancel the cyclic delayed work item ocelot-statswork. However, canceldelayedwork may fail to...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbddestroy call disableworksync&info-postsendcreditswork In smbdDestroy, we may destroy the memory, so it’s better to wait until postsendcreditswork is no longer pending and will never be started again. I actual...

kernel: iommufd: Fix race during abort for file descriptors

A flaw was found in the Linux kernel such that the IOMMU file-descriptor subsystem, when aborting the allocation of a new object before installing the file descriptor, the code calls fput on the file and then immediately frees the associated object kfree, but the object is still referenced by the...

PT-2026-43765

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/iwcm component where the work submission logic unconditionally calls queue work. Because a free list of struct iwcm work is used, each call to queue work is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000363 advisory. drivers/gpu/drm/radeon/radeondisplay.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: A...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000282 advisory. drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. Tenable has extracted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000229 advisory. drivers/gpu/drm/amd/amdkfd/kfdinterrupt.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: The...

PT-2026-8113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a data-race condition within the l2tp tunnel del work function. This issue arises when handling kernel sockets, specifically during the deletion of an L2TP...

PT-2026-27737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the NFC rawsock functionality of the Linux kernel. Specifically, the rawsock release function does not properly cancel pending tx work and purge the write queue before...

SUSE CVE-2022-50833

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use hdev-workqueue when queuing hdev-cmd,ncmdtimer works syzbot is reporting attempt to schedule hdev-cmdwork work from systemwq WQ into hdev-workqueue WQ which is under draining operation 1, for commit c8efcc2589464ac...

SUSE CVE-2023-54217

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/msm: Add missing check and destroy for allocorderedworkqueue" This reverts commit 643b7d0869cc7f1f7a5ac7ca6bd25d88f54e31d0. A recent patch that tried to fix up the msmdrminit paths with respect to the workqueue but on...

SUSE CVE-2023-54309

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmvtpmproxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is made visible before 'workqueue' is initialized, which can lead to a memory corruption in the worst case scenario. Address this by initializing 'workqueu...

SUSE CVE-2023-54310

In the Linux kernel, the following vulnerability has been resolved: scsi: message: mptlan: Fix use after free bug in mptlanremove due to race condition mptlanprobe calls mptregisterlandevice which initializes the &priv-postbucketstask workqueue. A call to mptlanwakepostbucketstask will subsequent...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992994 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9...

Linux Distros Unpatched Vulnerability : CVE-2023-54244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992720 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Add missing check for allocorderedworkqueue Add check for the return value of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992970 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Remove WQMEMRECLAIM from storvscerrorwq storvscerrorwq workqueue should not be...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992821 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwl4965: Add missing check for createsinglethreadworkqueue Add the check for the return val...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992754 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition use-after-free...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992984 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flushworkqueue to prevent uaf Our detector found a concurrent use-after-free bug wh...