EUVD-2026-76339

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only noticed...

CVE-2026-81016

This vulnerability affects the Linux kernel's AMD Platform Management Controller (PMC) driver (platform/x86/amd/pmc). The function amd_stb_s2d_init() discards return values from several S2D SMU commands. When the SMU refuses a command, the S2D_PHYS_ADDR_LOW/HIGH return values are ignored, leaving...

CVE-2026-81016 platform/x86/amd/pmc: Propagate SMU errors and validate S2D address

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only noticed...

CVE-2026-81016 platform/x86/amd/pmc: Propagate SMU errors and validate S2D address

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only noticed...

CVE-2026-81008 interconnect: Fix use after free in icc_get() and of_icc_get_by_index()

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in iccget and oficcgetbyindex In oficcgetbyindex and iccget, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the path object a...

CVE-2026-81006

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that last creation fails, the error path removes only nrusers before droppi...

CVE-2026-81004

CVE-2026-81004 affects the Linux kernel's IPMI message handler (ipmi:msghandler). When an error occurs during the startup of an IPMI interface, scheduled work may not be properly canceled before the interface is freed, which can prevent clean resource release and potentially lead to resource exha...

EUVD-2026-76327

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

CVE-2026-81004

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

CVE-2026-80996

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

CVE-2026-80996

CVE-2026-80996 affects the Linux kernel 's L2TP (Layer 2 Tunneling Protocol) subsystem. The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail during message allocation, encoding, or multicasting. Because th...

EUVD-2026-76319

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

CVE-2026-80996 net: l2tp: do not propagate multicast notification errors

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

CVE-2026-80993

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

CVE-2026-80993 net: phylink: correctly validate returned PCS in phylink_inband_caps

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

CVE-2026-80993

CVE-2026-80993 affects the Linux kernel in the net: phylink subsystem. In the function phylink_inband_caps() , the PCS returned by mac_select_pcs() was only validated against NULL , but the function can also return an error pointer . This causes a kernel panic because phylink_pcs_inband_caps() di...

CVE-2026-80993 net: phylink: correctly validate returned PCS in phylink_inband_caps

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

EUVD-2026-76316

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

CVE-2026-80992

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...