CVE-2026-90332

CVE-2026-90332 affects the Linux kernel 's PCI DesignWare (DWC) endpoint driver . When the Root Complex changes the MSI target address, dw_pcie_ep_raise_msi_irq() unmaps the existing iATU (internal Address Translation Unit) entry and reprograms it for the new address. However, unlike the already-...

CVE-2026-90333 dm-integrity: replace forgeable discard filler with a keyed sector marker

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

CVE-2026-90333

This CVE affects the dm-integrity target in the Linux kernel (standalone mode). The discard-block check in dm_integrity_rw_tag() treats a stored tag of all 0xf6 bytes (DISCARD_FILLER) as proof a block was discarded, skipping HMAC verification. An attacker with raw write access to the backing devi...

CVE-2026-90332 PCI: dwc: ep: Flush cached MSI write before unmapping the iATU

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSI-X path already flushes any posted MSI-X write before tearing down its iATU mapping. That was added by commit c22533c66cca "PCI: dwc: ep: Flush MSI-X write...

CVE-2026-90332

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSI-X path already flushes any posted MSI-X write before tearing down its iATU mapping. That was added by commit c22533c66cca "PCI: dwc: ep: Flush MSI-X write...

CVE-2026-90332 PCI: dwc: ep: Flush cached MSI write before unmapping the iATU

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSI-X path already flushes any posted MSI-X write before tearing down its iATU mapping. That was added by commit c22533c66cca "PCI: dwc: ep: Flush MSI-X write...

CVE-2026-90331

In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found within the hid-asus driver: - unchecked size in asusrawevent - unclean teardown of asusprobe on failure - possible use-after-free in asuspro...

CVE-2026-90331

CVE-2026-90331 affects the hid-asus driver in the Linux kernel . Multiple defects were identified: an unchecked size in asus_raw_event(), a possible use-after-free in asus_probe, unclean teardown on probe failure, sleeping calls in atomic context , and incorrect packet sizes sent to the keyboard ...

CVE-2026-90331 HID: asus: refactor the two workqueues and init sequence

In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found within the hid-asus driver: - unchecked size in asusrawevent - unclean teardown of asusprobe on failure - possible use-after-free in asuspro...

CVE-2026-90331 HID: asus: refactor the two workqueues and init sequence

In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found within the hid-asus driver: - unchecked size in asusrawevent - unclean teardown of asusprobe on failure - possible use-after-free in asuspro...

CVE-2026-90329

In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hiddeviceiostart allows reports to run concurrently with probe. If the probe subsequently fails, hiddeviceprobe releases driver resources and clears hdev-driver without fir...

CVE-2026-90330

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

CVE-2026-90330

CVE-2026-90330 is a resource leak in the Linux kernel's Logitech HID++ force-feedback driver. In hidpp_ff_init(), if any of the subsequent allocations (HID++ FF private data, effect ID array, or workqueue) fail after input_ff_create() succeeds, the function returns an error without calling input_...

CVE-2026-90330 HID: logitech-hidpp: Fix FF device cleanup on init failure

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

EUVD-2026-81990

In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hiddeviceiostart allows reports to run concurrently with probe. If the probe subsequently fails, hiddeviceprobe releases driver resources and clears hdev-driver without fir...

CVE-2026-90329

CVE-2026-90329 is a use-after-free in the Linux kernel HID (Human Interface Device) subsystem. When hid_device_io_start() permits HID reports to run concurrently with device probe, a failed probe can trigger __hid_device_probe() to free driver resources (including the hidraw object) while a repor...

EUVD-2026-81991

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

CVE-2026-90329 HID: synchronize input before cleaning up a failed probe

In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hiddeviceiostart allows reports to run concurrently with probe. If the probe subsequently fails, hiddeviceprobe releases driver resources and clears hdev-driver without fir...

CVE-2026-90329 HID: synchronize input before cleaning up a failed probe

In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hiddeviceiostart allows reports to run concurrently with probe. If the probe subsequently fails, hiddeviceprobe releases driver resources and clears hdev-driver without fir...

CVE-2026-90327

CVE-2026-90327 is a memory out-of-bounds write in the Linux kernel's phonet: pep subsystem. The vulnerable function pep_getsockopt() clamps the reported length to the caller's buffer using min_t(), but then stores the value via put_user(), which unconditionally writes sizeof(int) bytes. When a ge...