ROS-20260929-73-0007

The vulnerability of the scsihostbusy function in the drivers/scsi/hosts.c module of the Linux SCSI device driver framework is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20260929-73-0080

The vulnerability of the drivers/iio/accel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0092

The vulnerability of the teamportadd function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260929-73-0123

The vulnerability in the drivers/input/touchscreen/tiam335xtsc.c driver for the touchscreen interface TSC of the tiam33xtsc component of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service...

ROS-20260929-73-0167

The vulnerability of the destroymc function in the drivers/infiniband/core/cma.c file of the Linux kernel’s InfiniBand driver is related to errors during link counter updates. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260929-73-0049

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260929-73-0126

The vulnerability of the fslotgremove function in the drivers/usb/phy/phy-fsl-usb.c module of the Linux kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to gain increased privileges...

ROS-20260929-73-0127

The vulnerability in the drivers/target/targetcoretransport.c file of the Linux operating system’s SCSI device support driver is related to errors in pointer assignment for ttaskcdb. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0151

The vulnerability of the dtv5100i2cmsg function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

ROS-20260929-73-0160

The vulnerability of the asdpciRemove function in the drivers/scsi/aic94xx/aic94xxinit.c driver for Linux SCSI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0176

The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260929-73-0142

The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0024

The vulnerability of the multiq3attach function in the drivers/comedi/drivers/multiq3.c module, which supports Linux kernel-based data collection devices, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service...

CVE-2026-18414 Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

CVE-2026-18414

The ADI MAX32 ADC driver contains an out-of-bounds write vulnerability due to incorrect buffer size validation in drivers/adc/adc_max32.c. The start_read() function fails to account for sizeof(uint16_t) when comparing the buffer size against the sample count, allowing buffers that are half the re...

EUVD-2026-88472

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

ROS-20260928-73-0048

The vulnerability of the drivers/pci/iov.c component in the Linux operating system is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

ROS-20260928-73-0008

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260928-73-0086

The vulnerability of the btusbdisconnect function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...