PT-2026-94769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the PCI subsystem. This occurs when a probe runs concurrently with the removal of dynamic IDs, as the remove id store function can free the node whil...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where scmi device destroy uses a protocol and name lookup method that excludes transport devices, preventing them from being properly...

PT-2026-94879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi child dev find function drops the reference returned by device find child prematurely. This can lead to a race condition...

PT-2026-94883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the system fails to properly reject out-of-range Device Tree DT protocol IDs. While the DT parsing paths identify protocol IDs th...

PT-2026-94900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/rvt component. The rvt alloc device function deallocates the IB device when the port array allocation fails, but it continues to return the...

PT-2026-94932

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference count leak exists during MHI device creation. The function mhi ep create device allocates references for the UL and DL channels; however, if dev set name or device add...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

PT-2026-94965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the zynqmp dma remove function between runtime Power Management PM and device removal. The issue occurs because runtime PM is disabled only after the system...

PT-2026-94967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-unlock issue exists in the lp5860 device init function. If the lp5860 init dt function fails, a mutex that has already been unlocked is unlocked a second time. A double-unlock...

PT-2026-94632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firmware loader where fw load sysfs fallback calls device add before adding fw priv to pending fw head. This allows a userspace helper to complete the request via...

PT-2026-94868

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ipu6 media component. The function ipu6 bus initialize device stores the isys/psys pdata pointer in struct ipu6 bus device and initializes the auxiliary...

CVE-2026-93080: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix transport device teardown lookup SCMI transport devices are deliberately excluded from normal SCMI bus matching so protocol drivers cannot bind to the internal transport children. However, scmidevicedestroy...

CVE-2026-93136: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation mhiepcreatedevice takes one device reference for the UL channel and another for the DL channel after allocating the transfer device. These references...

CVE-2026-20248

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...

CVE-2026-20250

A vulnerability in Datagram TLS DTLS message handling of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a...

CVE-2026-20135

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to improper buffer...

CVE-2026-20248 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...

EUVD-2026-81143

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...

CVE-2026-20248

CVE-2026-20248 affects the DNS over TCP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) Software. The root cause is a logic error in parsing DNS queries and tracking the size of incoming buffers. An unauthenticated, remote a...