Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: clk: davinci: A NULL check was added in davincilpscclkregister. devmkasprintf returns NULL when memory allocation fails. Currently, davincilpscclkregister does not check for this case, resulting in a NULL pointer being...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Do not perform the strip or remove function when the driver is built-in. Using exit for the remove function results in the remove callback being discarded when CONFIGMMCDAVINCI=y is enabled. When such a device becom...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mfd: davincivoicecodec: Fixed a possible nullptrderef issue in davincivcprobe. This issue could lead to a nullptrderef when using ‘res’. If platformgetresource returns NULL, moving using ‘res’ after devmioremapresource will preve...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs. The value of pdata-gpiounbanked is retrieved from the Device Tree. If the Device Tree is corrupted due to any error, this value can be arbitrary. Without this value validation,...

CVE-2026-64236

A flaw was found in the i2c davinci driver of the Linux kernel. When the 'clock-frequency' property is missing from the device tree, the driver's fallback mechanism can lead to a division-by-zero error. This vulnerability can be triggered by a local attacker providing a malformed device tree,...

Linux Distros Unpatched Vulnerability : CVE-2026-64236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency'...

UBUNTU-CVE-2026-64236

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

SUSE CVE-2026-64236

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

DEBIAN-CVE-2026-64236

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

CVE-2026-64236

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

CVE-2026-64236

The CVE-2026-64236 issue affects the Linux kernel i2c/davinci driver: if the device-tree clock-frequency is missing, the driver falls back to DAVINCI_I2C_DEFAULT_BUS_FREQ. The macro was defined in kHz (100), but the property is in Hz, causing the probe to divide by 1000 and produce dev->bus_fr...

EUVD-2026-48645

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

CVE-2026-64236 i2c: davinci: fix division by zero on missing clock-frequency

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

PT-2026-64351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division-by-zero issue exists in the i2c davinci driver. When the clock-frequency property is missing from the device tree, the driver uses the DAVINCI I2C DEFAULT BUS FREQ macro...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mmc: davincimmc: Prevents the transmitted data size from exceeding the length of sgm. No check is performed on the size of the data to be transmitted. This can lead to a kernel panic when the transmitted data size exceeds the...

The vulnerability of the davinci_cpufreq_probe() function in the drivers/cpufreq/davinci-cpufreq.c module of the Linux kernel’s frequency scaling driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the davincicpufreqprobe function in the drivers/cpufreq/davinci-cpufreq.c module of the Linux kernel frequency scaling driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260324-73-0034

A vulnerability in the davinci component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

UAC-0050 Targets European Financial Institution With Spoofed Domain and RMS Malware

A Russia-aligned threat actor has been observed targeting a European financial institution as part of a social engineering attack to likely facilitate intelligence gathering or financial theft, signaling a possible expansion of the threat actor's targeting beyond Ukraine and into entities...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005068 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip remove function when driver is builtin Using exit for the remove functi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004948)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004948 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davincilpscclkregister devmkasprintf returns NULL when memory...