CVE-2026-68211

The CVE concerns the Linux kernel component media: stm32-dcmipp. The issue arises when start_streaming() fails after vb2 has handed buffers to the driver via buf_queue(); if those buffers aren’t returned with vb2_buffer_done(), vb2_start_streaming() may WARN_ON(owned_by_drv_count) and the buffers...

EUVD-2026-55312

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

CVE-2026-68211 media: stm32-dcmipp: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

EUVD-2026-55310

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CVE-2026-68209 media: sun4i-csi: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CVE-2026-68209

The CVE-2026-68209 issue affects the Linux kernel sun4i-csi driver where, if start_streaming() fails, the vb2 framework does not return queued buffers, leading to buffer leaks and potential resource exhaustion. The root cause is that buffers queued via vb2_buffer_done() may not be returned before...

CVE-2026-68091 HID: wacom: stop hardware after post-start probe failures

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

EUVD-2026-55272

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

CVE-2026-68091

CVE-2026-68091 concerns the Linux kernel HID Wacom driver. In wacom_parse_and_register(), HID hardware is started before inputs and LED/remotes are initialized. If subsequent steps fail, the error path currently releases Wacom resources without stopping the HID hardware, potentially causing syste...

CVE-2026-68089 iio: core: fix uninitialized data in debugfs

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...

PT-2026-69622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msi2500 driver where the msi2500 start streaming function fails to return queued buffers when an error occurs. The vb2 framework provides buffers via buf queue...

PT-2026-69609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sun4i-csi media component where queued buffers leak if the sun4i csi start streaming function returns an error without returning those buffers via vb2 buffer done...

PT-2026-69617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel media component when start streaming fails. The pwc isoc init function submits isochronous URBs USB Request Blocks in a loop. If the first URB is...

PT-2026-69613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the rtl2832 sdr driver within the media subsystem. The vb2 framework provides buffers to the driver via buf queue before calling start streaming. If the rtl2832 s...

PT-2026-69611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the stm32-dcmipp media component where queued buffers leak if the dcmipp bytecap start streaming function returns an error without returning those buffers via vb2 buff...

CVE-2026-19035

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function newqoslimitstart of the file /etc/qoslimit. The manipulation of the argument newqoslimitenable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available a...

CVE-2026-19035 Shibby Tomato qoslimit new_qoslimit_start os command injection

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function newqoslimitstart of the file /etc/qoslimit. The manipulation of the argument newqoslimitenable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available a...

CVE-2026-19035

CVE-2026-19035 affects Shibby Tomato 1.28.0000. The flaw is in the function new_qoslimit_start in /etc/qoslimit, where manipulating the argument new_qoslimit_enable enables OS command injection. Remote exploitation is possible and the exploit is publicly available; CVSS metrics indicate HIGH impa...

PT-2026-68469

Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28.0000 Description An OS command injection flaw exists in the new qoslimit start function located in the /etc/qoslimit file. A remote attacker can trigger this issue by manipulating the new qoslimit enable argument. OS...

MAL-2026-13370 Malicious code in llm-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cc7f305d00b175d42babae0198faea6951f846bcdeda2e3d6754fd9ceba2d7 On npm install, postinstall.js unconditionally runs runSetup which wires the package into the installer's AI tooling and stands up long-lived...