PT-2026-90098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ALSA mts64 driver fails to validate if the devptr-id value is negative during the probe process. When bound via sysfs, a negative ID may be assigned, which can lead to Out-of-Bounds...

PT-2026-90104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the sm501 multi-function device mfd driver. Memory allocated for the sm501 devdata structure within the sm501 pci probe and sm501 plat probe functions is not...

PT-2026-90153

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A memory leak exists in the sar probe function. This occurs because memory allocated for device mode info within the parse package function, which is called by sar get data, is not properly...

PT-2026-90156

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the via-sdmmc driver where the SD card-detect interrupt remains registered if mmc add host fails during the probe process. Because the error path only unmaps registers...

PT-2026-90238

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the staging/ipu7 media component. The isys register devices function registers the V4L2 async notifier using isys notifier init. If a subsequent probe...

PT-2026-90189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the bq25890 driver within the power supply subsystem. The bq25890 fw probe function acquires a reference to a secondary charger via power supply get by name, b...

PT-2026-96359

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx uart ports lifetime imx uart probe publishes its devm-allocated port in imx uart ports before uart add one port because console setup uses the table. The entry is not cleared when adding the port fails ...

PT-2026-90168

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msm iommu probe function where the IOMMU object is added to qcom iommu devices before the sysfs device is added and registered with the IOMMU core. If iommu device...

PT-2026-96390

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar probe The memory allocated for device mode info in parse package called by sar get data is not freed in some of the error paths in sar probe. Fix that by converting to use...

PT-2026-96580

In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm iommu probe adds its devm-managed IOMMU object to qcom iommu devices before adding the IOMMU sysfs device and registering it with the IOMMU core. If iommu device sysfs add...

PT-2026-90096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The portman2x4 driver fails to validate if the devptr-id value is negative when bound via sysfs. This lack of validation can result in out-of-bounds OOB access—where the program reads or...

PT-2026-90456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial imx driver where the imx uart probe function publishes a devm-allocated port in the imx uart ports table before calling uart add one port. Because the entry...

K000163284: Linux kernel vulnerability CVE-2026-53232

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfpbusdelupstream in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling...

CVE-2026-88287 GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process...

Malicious Package

Overview bq-sdist-probe-vrp is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the...

Malicious Package

Overview bq-build-probe-vrp-2026 is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the...

CVE-2026-88287: Stack-based Buffer Overflow

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process...

Malicious code in bq-sdist-probe-vrp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61d3e118672e10f0dc02115acd8235c3b356d75e7cb59a69e26fec28070c814 setup.py executes at pip install time and performs installer-side credential and host reconnaissance. It queries the GCE/GCP metadata service at...

MAL-2026-16099 Malicious code in bq-sdist-probe-vrp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61d3e118672e10f0dc02115acd8235c3b356d75e7cb59a69e26fec28070c814 setup.py executes at pip install time and performs installer-side credential and host reconnaissance. It queries the GCE/GCP metadata service at...

MAL-2026-16098 Malicious code in bq-build-probe-vrp-2026 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46dd2007aa00f3bcd8ad6c767a4f1bf2da7ee75cf91d5b692aec39c546cc1d65 setup.py executes at pip install and collects a full dump of os.environ, hostname, uid/gid, uname output, /proc/self/cgroup, /proc/version, and the G...