PT-2026-94849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad525x dpot driver where the ad dpot probe function manually creates per-RDAC sysfs files. This implementation requires the probe function to handle the rollback o...

PT-2026-94910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the san probe function when installing the GSBUS address space handler. This happens because the function dereferences the result of ACPI COMPANION...

PT-2026-94775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where devm krealloc is used to expand the smmu variable into a larger tegra241 cmdqv structure. This process frees the original smmu...

PT-2026-94812

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the int3400 thermal driver where the evaluate odvp function creates per-ODVP sysfs files before the thermal zone and other probe resources are registered. Because the...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

PT-2026-94616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An error handling issue exists in the sd probe function within the SCSI subsystem. When sd large pool create fails after device add&sdkp-disk dev has already succeeded, the system fails ...

PT-2026-94776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where the error IRQ is requested before the cmdqv-vintfs array is allocated and cmdqv-num vintfs is set. If a CMDQV remains enabled...

PT-2026-94784

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the kmb ocs aes probe function requests the device IRQ before initializing irq completion. Because the handler can execute immediately upon registration, the ocs aes...

PT-2026-94873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dax/fsdev component where the fsdev dax probe function sets pgmap-ops to &fsdev pagemap ops and pgmap-owner to dev dax without providing a mechanism to clear them...

PT-2026-94913

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the USB subsystem. This occurs when a probe operation runs concurrently with the removal of dynamic IDs. Because dynamic IDs are only guaranteed to b...

PT-2026-94752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cros ec debugfs probe function where the notifier panic is registered with the EC panic notifier chain, but the remove path fails to unregister it before tearing...

PT-2026-94937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the r8a66597 probe function within the USB gadget driver. When the usb add gadget udc function fails, the execution flow jumps to err add udc, which frees t...

PT-2026-94745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom SCM driver during the probe process. In qcom scm probe, the function devm request threaded irq is called before the scm variable is publishe...

PT-2026-94954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sa2ul crypto component where the sa ul probe function calls sa init mem to create a DMA Direct Memory Access pool for security context buffers but fails to check t...

PT-2026-94911

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mlxbf-pmc driver when it is force-bound to a device that lacks an ACPI companion object. This happens because the mlxbf pmc probe function passes...

CVE-2026-90041

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

AZL-101606 CVE-2026-90041 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

DEBIAN-CVE-2026-90041

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

DEBIAN-CVE-2026-89933

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

CVE-2026-89933

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...