CVE-2026-90395

A flaw was found in the Linux kernel's isp1704charger driver. When the driver is removed, it unregisters the USB notifier and power supply without ensuring that all scheduled work has completed. This improper resource cleanup can lead to the power supply state being torn down while operations are...

CVE-2026-90393

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter component. This vulnerability arises from a race condition in the bpfnetnslinkupdateprog function, where checks are performed without proper locking. A local attacker could exploit this to trigger a Use-After-Free UAF condition,...

CVE-2026-90392

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local attacker could exploit a Use-After-Free UAF vulnerability by concurrently replacing a BPF program while its information is being read without proper locking. This could allow the attacker to achieve privilege...

CVE-2026-90388

A flaw was found in the Linux kernel's IOMMU/DMA subsystem. The non-blocking, non-coherent allocation path did not directly check the result of dmaallocfrompool for allocation failures. This oversight could lead to the use of unallocated memory for IOMMU mapping, potentially causing memory...

CVE-2026-90383

A flaw was found in the Linux kernel's SGI GRU Graphics Resource Unit TLB Translation Lookaside Buffer miss handler. This handler incorrectly walks a process's page tables without holding necessary locks or references, and uses kernel page-table accessors on user page tables. This could allow a...

CVE-2026-90382

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. When operating in monitor mode with the fcsfail filter enabled, a remote attacker could send corrupted wireless frames. These frames, if reporting an invalid length, would trigger a kernel warning. If the system is configured to panic on...

CVE-2026-90380

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A use-after-free vulnerability occurs due to a race condition in the mt76rxpollcomplete function. This can happen when a Wi-Fi station STA is removed, but the system still attempts to access its associated wireless client ID wcid. An...

CVE-2026-90379

A flaw was found in the Linux kernel's Wi-Fi driver mt76. This vulnerability occurs when a PCIe Advanced Error Reporting AER error causes the bus to become unresponsive. The driver then attempts to read registers, receiving an invalid value that corrupts its internal memory management. This...

CVE-2026-90377

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This issue affects the Receive Reorder Offload RRO 3.0 data queuing mechanism. Incorrect handling of received data frames can cause them to stall and be reordered within the driver. This can lead to a denial of service or data integrity...

CVE-2026-90376

A flaw was found in the MediaTek mt76 Wi-Fi driver within the Linux kernel. An incorrect Multi-Link Device MLD ID in the MAC Transmit Descriptor TXD and Host Interface Transmit Packet HIF TXP can cause the firmware to enter a busy loop. This issue occurs when a third MLD link is in power saving...

CVE-2026-90375

A flaw was found in the Wi-Fi mt76 driver of the Linux kernel. This vulnerability arises from incorrect accounting of non-AQL Atheros Quality of Service packets for Multi-Link Operation MLO stations. Specifically, the mt76txqueueskb function can misattribute packet counts, leading to an inflated...

CVE-2026-90374

A flaw was found in the Linux kernel's mt76 wifi driver. This vulnerability occurs due to improper validation of the bandidx field, which is used to index an array. A malicious actor could provide a corrupt or reserved descriptor value, leading to an out-of-bounds access or a NULL pointer...

CVE-2026-90373

A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7915 module. The mt7915removeinterface function cleared a Wireless Client ID wcid mask bit without proper locking mechanisms and before clearing the associated RCU Read-Copy-Update pointer. This oversight creat...

CVE-2026-90372

A flaw was found in the Linux kernel's mt76 WiFi driver, affecting mt7915 devices. A remote attacker, by sending a specially crafted VHT/HE MCS map with no supported spatial streams, can trigger an integer underflow in the mt7915mcugetstanss function. This results in an incorrect value being...

CVE-2026-90371

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability is a race condition that occurs during the recycling of RXDMADC buffers. These buffers are associated with different Network Adapter Programming Interface NAPI instances, and a direct recycling method can lead to a timin...

CVE-2026-90369

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. The mt76mmiowritecopy and mt76mmioreadcopy functions, which handle memory-mapped I/O MMIO operations, can perform out-of-bounds reads or writes. This occurs when the data length is not a multiple of four, leading to memory access beyond th...

CVE-2026-90368

A flaw was found in the Wi-Fi driver mt76: mt7915 of the Linux kernel. Improper error handling during the addition of a new Wi-Fi interface can lead to the permanent leakage of system resources and a stale pointer dereference. This vulnerability could allow a local attacker to cause system...

CVE-2026-90367

A flaw was found in the Linux kernel's mt7996 Wi-Fi driver. The driver fails to properly hold a mutex, which is a mechanism to prevent simultaneous access to shared resources, when disabling a transmit worker during System Error Recovery SER. This oversight creates a race condition where a...

CVE-2026-90366

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting mt7996 devices. When a Channel Switch Announcement CSA countdown is active and Multiple Basic Service Set Identifier MBSSID is enabled, the driver may attempt to write more beacon data than allocated. This can lead t...

SUSE-SU-2026:4749-1 Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...