CVE-2026-64362 HID: lg-g15: cancel pending work on remove to fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...

EUVD-2026-48906

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...

CVE-2026-64362

CVE-2026-64362 is a use-after-free in the Linux kernel's HID lg-g15 driver. The driver allocates lg_g15_data via devm and schedules a work item from input report handlers, but had no remove callback to cancel pending work. When a supported keyboard (G15, G15 v2, or G510) is unplugged, devres free...

CVE-2026-64362 HID: lg-g15: cancel pending work on remove to fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...

CVE-2026-64329

A use-after-free race condition exists in the Linux kernel's USB Type-C UCSI CCG driver. In the device remove path (ucsi_ccg_remove()), ucsi_destroy() frees the ucsi object before free_irq() is called, so an in-flight threaded IRQ handler may dereference the freed memory. The fix reorders free_ir...

EUVD-2026-48873

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...

CVE-2026-64329 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...

CVE-2026-64329 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...

CVE-2026-64305 crypto: qat - protect service table iterations with service_lock

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with servicelock The servicetable list is protected by servicelock when entries are added or removed in adfserviceadd and adfserviceremove, but several functions iterate over the lis...

SUSE CVE-2026-64212

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwlmldremovelink, the link-fwid is saved at the beginning of the function so we have it after we freed the link. But the link pointer can be NULL, and is...

PT-2026-64550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB Type-C UCSI CCG driver. The threaded IRQ handler ccg irq handler invokes ucsi notify common, which may trigger ucsi connector change and schedule...

PT-2026-64586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the HID letsketch driver. The letsketch probe function initializes a per-device timer inrange timer using timer setup, which is subsequently re-armed...

PT-2026-64702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA hda/cs35l41 component where cs35l41 hda creates ALSA controls with private data pointing to the cs35l41 hda object. The firmware load control can queue fw loa...

PT-2026-64583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID lg-g15 driver. The lg g15 data structure is allocated using devm and contains a work item scheduled by report handlers from device input,...

PT-2026-64731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI NFIT core where improper error cleanup in the acpi nfit init function can lead to a use-after-free condition. If acpi nfit init fails after adding an acpi des...

CVE-2026-64329: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...

MAL-2026-11054 Malicious code in app-node-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...

Malicious code in app-data-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9d67601ec8b46265e1f23f5e48ff5beb050626f4bc156b291cb1b8f8c36d35 package.json declares postinstall node test.js and main: index.js, but index.js is absent from the tarball. test.js executes require'.', which throws...

MAL-2026-11053 Malicious code in app-data-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9d67601ec8b46265e1f23f5e48ff5beb050626f4bc156b291cb1b8f8c36d35 package.json declares postinstall node test.js and main: index.js, but index.js is absent from the tarball. test.js executes require'.', which throws...

MAL-2026-11052 Malicious code in app-data-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc306d8463afd4c0baadf4af1627986a5cb136d516c71415957fa606150008bd Analysis of [email protected] 3 files scanned produced no static or traced findings. No lifecycle hooks fetching or executing remote content, no...