DEBIAN-CVE-2026-90147

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

CVE-2026-90147

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

CVE-2026-90410

CVE-2026-90410 is a use-after-free vulnerability in the Linux kernel's davinci SPI driver . The root cause stems from a mismatch between the non-managed controller allocation (spi_alloc_host()) and the managed IRQ registration (devm_request_threaded_irq()). During device removal, the controller a...

CVE-2026-90410 spi: davinci: switch to managed controller allocation

In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with devmrequestthreadedirq. During removal, spibitbangstop only unregisters th...

EUVD-2026-81889

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6socvolt is allocated with devmkcalloccpudev, ..., where cpudev is the CPU device from getcpudevice0. That device is never unbound, so its devres list is never...

CVE-2026-90296 cpufreq: imx6q: fix devres accumulation across driver rebind

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6socvolt is allocated with devmkcalloccpudev, ..., where cpudev is the CPU device from getcpudevice0. That device is never unbound, so its devres list is never...

CVE-2026-90296

CVE-2026-90296 affects the Linux kernel's cpufreq/imx6q driver. The root cause is a devres allocation leak : imx6_soc_volt was allocated via devm_kcalloc() against the CPU device (get_cpu_device(0)), which is never unbound, so its devres list is never freed. Each driver rebind (probe) therefore a...

CVE-2026-90296 cpufreq: imx6q: fix devres accumulation across driver rebind

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6socvolt is allocated with devmkcalloccpudev, ..., where cpudev is the CPU device from getcpudevice0. That device is never unbound, so its devres list is never...

CVE-2026-90198 ALSA: core: Fix use-after-free in snd_card_do_free()

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

CVE-2026-90198

CVE-2026-90198 is a use-after-free in the Linux kernel's ALSA core subsystem, specifically in snd_card_do_free(). It occurs when a devres-managed sound card is unbound while a user-space application still holds an open file descriptor. Upon closing the descriptor, the user thread continues in snd...

CVE-2026-90198 ALSA: core: Fix use-after-free in snd_card_do_free()

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

EUVD-2026-81791

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

CVE-2026-90147 clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

CVE-2026-90147 clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

CVE-2026-90296: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6socvolt is allocated with devmkcalloccpudev, ..., where cpudev is the CPU device from getcpudevice0. That device is never unbound, so its devres list is never...

CVE-2026-90198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

CVE-2026-90410: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with devmrequestthreadedirq. During removal, spibitbangstop only unregisters th...

PT-2026-94546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA core component. The problem occurs when a sound card managed by devres device resource management is unbound while a user-space application stil...

EUVD-2026-80538

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

SUSE CVE-2026-89455

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix use-after-free of event IRQs during teardown pldapcieirqdomaindeinit removes pcie-eventdomain via irqdomainremove, but the per-event IRQs mapped from that domain are requested with devmrequestirq in...