DEBIAN-CVE-2026-90330

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

CVE-2026-90330

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

AZL-102612 CVE-2026-90318 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fatscanlogstart leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fatscan. fatrebuildparent uses the directory entry to rebuild the...

AZL-102428 CVE-2026-90287 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in spuphyinit Fix the error paths of spuphyinit to undo exactly what each stage did: return directly if clkprepareenable fails, release only the clock if resetcontroldeassert fails, and jump to...

AZL-102036 CVE-2026-90194 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on deviceadd failures When deviceadd fails after acpidevicesetname has allocated an instance ID and a new acpidevicebusid has been linked into acpibusidlist, the rollback path only removes wakeuplis...

AZL-102510 CVE-2026-90126 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind pcf8563clkoutregisterclk registers the CLKOUT clock provider with ofclkaddprovider, but nothing ever unwinds it: there is no ofclkdelprovider call and the driver has no remove...

AZL-102000 CVE-2026-90119 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup sndice1712probe performs multiple initialization steps after sndcardnew, but directly returns on failures from later steps without releasing the ALSA card,...

GHSA-RM6M-HRCW-JW33 RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

Summary A logic and resource exhaustion vulnerability exists in the AMQP client's Quality of Service Qos configuration method. The Qos function accepts signed integers int for the prefetchCount and prefetchSize parameters but casts them directly to unsigned integers uint16 and uint32, respectivel...

CVE-2026-85999

A flaw was found in Soup Sieve, a CSS selector library. A remote attacker can provide a specially crafted CSS selector containing long whitespace or comment runs. This can cause excessive CPU consumption during selector trimming, leading to a Regular Expression Denial of Service ReDoS by stalling...

CVE-2026-93195 drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel The DisplayPort AUX channel gets initialized and registered during dwdpbind, but it is never unregistered, which may lead to resource leaks and/or use-after-free...

EUVD-2026-82303

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel The DisplayPort AUX channel gets initialized and registered during dwdpbind, but it is never unregistered, which may lead to resource leaks and/or use-after-free...

CVE-2026-93195

CVE-2026-93195 affects the Linux kernel component drm/bridge: synopsys: dw-dp (Synopsys DesignWare DisplayPort driver). The DisplayPort AUX channel is initialized and registered during dw_dp_bind() but is never unregistered , which may lead to resource leaks and/or use-after-free when the bridge ...

CVE-2026-93151 nvmet-rdma: fix response resource leak on queue teardown

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma transport is removed while I/Os are in flight, a response can be posted but its send completion is never delivered before the connection is to...

CVE-2026-93151 nvmet-rdma: fix response resource leak on queue teardown

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma transport is removed while I/Os are in flight, a response can be posted but its send completion is never delivered before the connection is to...

CVE-2026-93130

CVE-2026-93130 affects the Linux kernel's dell-wmi-base platform driver (under platform/x86). The root cause is a resource leak : when the module load fails, the SMBIOS request and the privacy driver are not properly cleaned up. The fix ensures proper release of these resources on the failure pat...

EUVD-2026-82238

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails...

CVE-2026-93130 platform/x86: dell-wmi-base: Fix resource leak on module load failure

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails...

CVE-2026-93130 platform/x86: dell-wmi-base: Fix resource leak on module load failure

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails...

EUVD-2026-82236

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...

EUVD-2026-82224

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However, the error path labels are out of order relative to the registration...