Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8727-1)

"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8727-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through th...

Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)

"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8728-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073369 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4 ARM: integrator: rea...

arduino-pico v6.1.0

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

SUSE CVE-2026-80842

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

AZL-99528 CVE-2026-80842 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

CVE-2026-80766

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device: timerdeletesync&drvdata-inrangetimer; hidhwstophdev; timerdeletesync only guarantees the timer is...

EUVD-2026-71253

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMDSYNC use-after-free on teardown armsmmuimplremove is registered as a devres action in armsmmuimplprobe, before armsmmuinitqueues allocates smmu-cmdq.q.base. On a devres unwind, whether a failed probe ...

CVE-2026-80766 HID: uclogic: fix use-after-free of inrange_timer on remove

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device: timerdeletesync&drvdata-inrangetimer; hidhwstophdev; timerdeletesync only guarantees the timer is...

The vulnerability of the __switch_to() function in the arch/arm/kernel/entry-armv.S module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the switchto function in the arch/arm/kernel/entry-armv.S module of the Linux operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the `komeda_fb_afbc_size_check()` function in the `drivers/gpu/drm/arm/display/komeda/komeda_framebuffer.c` file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...

PUB-A-512355295

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-511933767

In smmudetachdev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-512055546

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-512056694

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-512098385

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-511630167

In smmudetachdevnested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002835 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiodlookuptable Without the terminator, if a conid is passed to...