Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: IB/isert: delaying the final Login Response until the session is registered. The isertputlogintx function places the final Login Response on the wire before transportregistersession. However, iscsipostloginhandler can only reach...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: It is now checked whether IOWQBITEXIT is rechecked for each linked work item. The commit 10dc95939817 “iouring/io-wq: Check IOWQBITEXIT within the work run loop” fixed a obvious case where ioworkerhandlework took o...

DEBIAN-CVE-2026-93248

In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...

UBUNTU-CVE-2026-93248

In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...

SUSE CVE-2026-90294

In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isertputlogintx puts the final Login Response on the wire before transportregistersession, which iscsipostloginhandler reaches only after iscsitargetdologin...

EUVD-2026-81887

In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isertputlogintx puts the final Login Response on the wire before transportregistersession, which iscsipostloginhandler reaches only after iscsitargetdologin...

CVE-2026-90294

CVE-2026-90294 is a NULL pointer dereference in the Linux kernel's iSCSI over RDMA target (iSER) module. The root cause is a race condition: isert_put_login_tx() transmits the final Login Response before __transport_register_session() completes, so an initiator that immediately issues a SCSI comm...

PT-2026-94642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IB/isert component where the isert put login tx function sends the final Login Response before the session is registered via transport register session. If an...

CVE-2026-90294: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isertputlogintx puts the final Login Response on the wire before transportregistersession, which iscsipostloginhandler reaches only after iscsitargetdologin...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nvme-multipath: fixed the lockdep warning due to the partition scan operation. The test cases nvme/014, 057, and 058 occasionally fail due to the lockdep warning. As reported in the Closes tag URL, this warning indicates that ...

PT-2026-96407

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx urb wq on stop rtl8xxxu arms rx urb wq from the RX completion path: rtl8xxxu rx complete hands the URB to rtl8xxxu queue rx urb, which queues it on rx urb pending list and, once the list...

CVE-2026-80698

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

CVE-2026-80698

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

PT-2026-82998

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the dmaengine idxd component. The release callbacks idxd conf wq release, idxd conf engine release, and idxd conf group release call kfree on the enclosing...

PT-2026-86723

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxd conf wq release, idxd conf engine release, idxd conf group release each call kfree on the enclosing...

io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

...

AZL-93488 CVE-2026-64425 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

CVE-2026-64425: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

Linux Distros Unpatched Vulnerability : CVE-2026-64425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817...

ANT-2026-PVD37V09 · torvalds/linux · Use-After-Free

use-after-free high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PVD37V09: LPE via iouring io-wq worker pool In iouring's io-wq worker pool, cancelling a hashed bucket-0 work item whose list predecessor is...