SUSE CVE-2026-89982

In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2cmuxaddadapter takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data...

SUSE CVE-2026-91955

FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negotiation, allowing remote attackers to crash the server. Attackers can send crafted RDP packets with zero or oversized dimensions to trigger division-by-zero or assertion failures in...

CVE-2026-85718

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxConnections or maxConnectionsPerHost set above zero leaks one connection permit whenever TLS connection establishment fails...

CVE-2026-93176 drm/amd/display: Fix dangling pointer in plane reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangli...

CVE-2026-93176

CVE-2026-93176 is a dangling pointer vulnerability in the Linux kernel's DRM/AMD display driver, specifically in amdgpu_dm_plane_drm_plane_reset(). The function frees the old plane state before allocating a replacement; if the subsequent kzalloc() call fails, the state pointer is left pointing to...

CVE-2026-93175 drm/amd/display: Fix dangling pointer in CRTC reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

CVE-2026-93175 drm/amd/display: Fix dangling pointer in CRTC reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

CVE-2026-93175

CVE-2026-93175 is a dangling pointer (use-after-free) in the Linux kernel's DRM/AMD display driver. The function amdgpu_dm_crtc_reset_state() freed the old CRTC state before allocating a replacement; if kzalloc() failed, the function returned early, leaving a pointer to already-freed memory. The ...

CVE-2026-93159 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

CVE-2026-93159

CVE-2026-93159 affects the atmel-sha204a hardware RNG driver in the Linux kernel . In the nonblocking RNG path, a work_data structure is allocated to track in-flight asynchronous I2C requests and stored in rng->priv. If the I2C transfer fails, the previous code only logged a warning but left t...

EUVD-2026-82238

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails...

CVE-2026-93130

CVE-2026-93130 affects the Linux kernel's dell-wmi-base platform driver (under platform/x86). The root cause is a resource leak : when the module load fails, the SMBIOS request and the privacy driver are not properly cleaned up. The fix ensures proper release of these resources on the failure pat...

EUVD-2026-82224

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However, the error path labels are out of order relative to the registration...

CVE-2026-93116 platform/x86: asus-wmi: fix resource leaks on probe failure

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However, the error path labels are out of order relative to the registration...

CVE-2026-93116

CVE-2026-93116 affects the asus-wmi platform/x86 driver in the Linux kernel . During driver initialization in asus_wmi_add(), error path labels are misordered relative to the sequential registration of subsystems. When initialization fails partway through (e.g., asus_wmi_custom_fan_curve_init() o...

CVE-2026-93111

This vulnerability affects the Linux kernel BPF subsystem, specifically the tracing_multi trampoline mechanism. The root cause is that the tracing_multi link does not set the ftrace_managed flag, which causes the link to fail release when a tracing_multi link is attached followed by an fentry lin...

CVE-2026-93103 RDMA/hfi1: Preserve unit 0 on allocation failure

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Preserve unit 0 on allocation failure hfi1freedevdata assumes that the device was inserted into the unit table and unconditionally erases dd-unit. If xaallocirq fails, the zero-initialized unit remains zero, so full...

EUVD-2026-82210

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1initdd allocates the shared AIP/VNIC RX support before returning. If hfi1init or hfi1registeribdevice later fails, initone tears down the device data without calling hfi1freerx...

CVE-2026-93102 RDMA/hfi1: Free RX data on late probe failure

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1initdd allocates the shared AIP/VNIC RX support before returning. If hfi1init or hfi1registeribdevice later fails, initone tears down the device data without calling hfi1freerx...

CVE-2026-93102

CVE-2026-93102 affects the RDMA/hfi1 driver in the Linux kernel. The root cause is a resource leak: hfi1_init_dd() allocates shared AIP/VNIC RX support, but if hfi1_init() or hfi1_register_ib_device() subsequently fails, init_one() tears down device data without calling hfi1_free_rx() , leaking n...