CVE-2024-42140

The CVE-2024-42140 issue affects the Linux kernel following kexec crash handling on riscv. The root cause is a deadlock when kexec crash code runs in interrupt context, caused by acquiring the irqdesc spinlock and deactivating irqchip in irq_set_irqchip_state(). The fix removes the unnecessary ir...

CVE-2026-52933

CVE-2026-52933 affects the Linux kernel’s io_uring/poll component. The root cause is a signed comparison in io_poll_get_ownership() where atomic_read(&req->poll_refs) is compared to IO_POLL_REF_BIAS; when IO_POLL_CANCEL_FLAG (BIT(31)) is set, the value becomes negative, causing the slowpath to...

CVE-2023-53590

CVE-2023-53590 affects the Linux kernel SCTP scheduler code. The root cause was a missing reference counter in sctp_stream_priorities, which could cause a nested loop when freeing a stream priority (potential heavy CPU usage). The advisory notes that a refcnt is now added in sctp_stream_prioritie...