CVE-2026-89939

In the Linux kernel 's iio: chemical: atlas-sensor driver, atlas_buffer_postenable() acquires a runtime PM reference via pm_runtime_resume_and_get() but returns the result of atlas_set_interrupt() directly. If that call fails, the reference is leaked , preventing the device from ever autosuspendi...

CVE-2026-89939 iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlasbufferpostenable acquires a runtime PM reference with pmruntimeresumeandget but returns the result of atlassetinterrupt directly. If atlassetinterrupt...

EUVD-2026-80539

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlasbufferpostenable acquires a runtime PM reference with pmruntimeresumeandget but returns the result of atlassetinterrupt directly. If atlassetinterrupt...

CVE-2026-89938 iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

CVE-2026-89938 iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

EUVD-2026-80538

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

CVE-2026-89938

CVE-2026-89938 is a use-after-free (UAF) in the Linux kernel's IIO chemical atlas-sensor driver. When the driver is removed, the devm-managed IRQ is freed via free_irq() during the devres unwind, but a pending irq_work (atlas_work_handler) is not flushed first. If a buffer is enabled, the handler...

CVE-2026-89939: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlasbufferpostenable acquires a runtime PM reference with pmruntimeresumeandget but returns the result of atlassetinterrupt directly. If atlassetinterrupt...

PT-2026-93580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A power management PM reference leak occurs in the atlas buffer postenable function. The function acquires a runtime PM reference using pm runtime resume and get, but if the subsequent...

Linux Distros Unpatched Vulnerability : CVE-2026-89939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlasbufferpostenable acquires a runtime PM reference with pmruntimeresumeandget but...

Linux Distros Unpatched Vulnerability : CVE-2026-89938

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq...

PT-2026-93579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the atlas-sensor driver within the industrial I/O IIO chemical subsystem. The driver uses devm request threaded irq to request hardware data-ready...

CVE-2026-89938: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

linux-kernel-atlas

linux-kernel-atlas Living map of Linux kernel security rese...

Architecting the Secure AI-SOC: A Neurosymbolic Framework for Pipeline Integrity and Threat Mitigation

The integration of Large Language Models LLMs into Security Operations Centers SOCs streamlines threat intelligence but introduces critical vulnerabilities, notably indirect prompt injection via log poisoning. Adversaries exploit this vector to execute multistep "promptware'' kill chains by...

Linux Distros Unpatched Vulnerability : CVE-2026-82073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks...

CVE-2026-82073

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

CVE-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

CVE-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

EUVD-2026-72916

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...