4347 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: dfl-afu: validate DMA mapping length in afudmamapregion afuioctldmamap accepts a 64-bit length from userspace via DFLFPGAPORTDMAMAP ioctl without an upper...
Linux Distros Unpatched Vulnerability : CVE-2026-64303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengineprepslavesg fails for the TX channel, the error path terminates the TX DMA...
PT-2026-64524
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fsl-lpspi SPI driver where the RX channel is not terminated when the TX prepare failure path is triggered. Specifically, if the dmaengine prep slave sg function...
PT-2026-64501
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where afu ioctl dma map accepts a 64-bit length from userspace via the DFL FPGA PORT DMA MAP ioctl without an upper bound check. This value is passed to afu dma pin pages...
PT-2026-64548
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffs data got descs generates the eps addrmap which contains the endpoint direction. However, epfile-in was previous...
DEBIAN-CVE-2026-64240
In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f "media: rc: igorplugusb: heed coherency rules" changed the control request storage from an embedded struct to an allocated pointer so it can obey DMA...
CVE-2026-64240
In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f "media: rc: igorplugusb: heed coherency rules" changed the control request storage from an embedded struct to an allocated pointer so it can obey DMA...
DEBIAN-CVE-2026-64234
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...
DEBIAN-CVE-2026-64221
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...
CVE-2026-64221
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...
kernel: drm/xe/dma-buf: fix UAF with retry loop
A flaw was found in the Linux kernel, specifically within the drm/xe/dma-buf component. This Use-After-Free UAF vulnerability occurs due to an issue in a retry loop, where a buffer object is prematurely freed on error. An attacker could potentially exploit this to cause memory corruption, leading...
CVE-2026-64240
Affected software: Linux kernel (media: rc: igorplugusb driver). Issue: the control request storage was converted from an embedded struct to an allocated pointer to meet DMA coherency, but usb_fill_control_urb() still used the pointer to the struct as the setup packet. This caused the URB setup t...
CVE-2026-64240 media: rc: igorplugusb: fix control request setup packet
In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f "media: rc: igorplugusb: heed coherency rules" changed the control request storage from an embedded struct to an allocated pointer so it can obey DMA...
CVE-2026-64234
The CVE-2026-64234 issue in the Linux kernel affects the tty: serial: pch_uart path. It fixes a missing check for dma_alloc_coherent() failure, which could cause a NULL pointer dereference in dma_handle_rx(). The fix adds the check and ensures proper release of DMA channels and the PCI device ref...
EUVD-2026-48643
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...
CVE-2026-64221 spi: ti-qspi: fix use-after-free after DMA setup failure
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...
CVE-2026-64221
The CVE-2026-64221 entry concerns the Linux kernel SPI TI-QSPI driver. The flaw is a use-after-free after DMA setup failure: during probe, the driver falls back to PIO if DMA setup fails, and the fix ensures the DMA channel pointer is cleared if buffer allocation fails to avoid passing a released...
USN-8604-1 linux-azure-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...