CVE-2026-81015 platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amdpmcprobe registers the LPS0 s2idle handler with acpiregisterlps0dev and creates the driver's debugfs directory before calling amdstbs2dinit, which is the las...

CVE-2026-81015

A resource leak in the Linux kernel's AMD PMC (Power Management Controller) driver (platform/x86/amd/pmc) occurs when amd_stb_s2d_init() fails during probe. The error path leaves the LPS0 s2idle handler registered on the global list and leaks the debugfs directory, while devm-managed resources ar...

EUVD-2026-76338

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amdpmcprobe registers the LPS0 s2idle handler with acpiregisterlps0dev and creates the driver's debugfs directory before calling amdstbs2dinit, which is the las...

CVE-2026-81015 platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amdpmcprobe registers the LPS0 s2idle handler with acpiregisterlps0dev and creates the driver's debugfs directory before calling amdstbs2dinit, which is the las...

CVE-2026-81015

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amdpmcprobe registers the LPS0 s2idle handler with acpiregisterlps0dev and creates the driver's debugfs directory before calling amdstbs2dinit, which is the las...

PT-2026-90145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amd pmc probe function where the LPS0 s2idle handler is registered via acpi register lps0 dev and a debugfs directory is created before calling amd stb s2d init. I...

PT-2026-90344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the picolcd debug eeprom read function where it trusts a length byte provided by a device in its REPORT EE DATA reply. The function fails to verify this length against...

PT-2026-90384

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the init nfsd function where nfsd debugfs init is executed before nfsd4 init slabs. If the slab allocation fails, the system returns a value that bypasses nfsd debugfs exi...

PT-2026-90461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in debugfs where the lockdown check was not updated to include the mmap prepare file operation. This occurs because the relayfs was updated to use mmap prepare instead of...

PT-2026-90437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rockchip-samsung-dcphy PHY driver where the max register is incorrectly defined as 0x10000. Since the PHY register block is 64KB with a register stride of 4, the...

CVE-2026-89745: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

CVE-2026-89721: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range maxregister The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. maxregister names 0x10000, one register past the end of...

CVE-2026-89668: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare "return retval" bypasses nfsddebugfsexit, leaving orphan debugfs files wit...

CVE-2026-89628: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcddebugeepromread trusts resp-rawdata2 -- a length byte supplied by the device in its REPORTEEDATA reply -- clamped only to the caller's read count: ret =...

CVE-2026-81015: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amdpmcprobe registers the LPS0 s2idle handler with acpiregisterlps0dev and creates the driver's debugfs directory before calling amdstbs2dinit, which is the las...

PT-2026-96388

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcd debug eeprom read trusts resp-raw data2 -- a length byte supplied by the device in its REPORT EE DATA reply -- clamped only to the caller's read count: re...

SUSE CVE-2026-80764

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs readers...

AZL-99575 CVE-2026-80764 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs readers...

CVE-2026-80764

CVE-2026-80764 affects the Linux kernel Bluetooth subsystem. The vulnerability is a use-after-free (UAF) in the HCI event handler: hci_cc_reset() clears the LE accept and resolving lists without acquiring hdev->lock , while debugfs readers (e.g., white_list_show) hold that lock while traversin...

CVE-2026-80764 Bluetooth: hci_event: fix LE list UAF on reset

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs readers...