CVE-2026-89877 media: saa7164: fix cleanup on resource allocation failure

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164devsetup adds the device to the global saa7164devlist before requesting the PCI BAR memory regions. If getresources fails, saa7164devsetup decrements the device...

CVE-2026-89830

CVE-2026-89830 affects the Linux kernel 's f2fs filesystem. In __allocate_data_block(), when a new data block is allocated (dn->data_blkaddr == NULL_ADDR), inc_valid_block_count() is called to increment total_valid_block_count and i_blocks. If the subsequent f2fs_allocate_data_block() call the...

CVE-2026-89824 drm/panel-edp: fix i2c adapter leak on probe failure

In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure e.g. probe deferral and on driver unbind also if a devicetree redundantly uses the 'ddc-i2c-bus' property to point ...

CVE-2026-89824

CVE-2026-89824 affects the Linux kernel component drm/panel-edp . The root cause is a failure to drop the i2c adapter reference on probe failure (e.g., probe deferral) and on driver unbind, specifically when a devicetree redundantly uses the 'ddc-i2c-bus' property to point to the aux ddc bus. Thi...

CVE-2026-89824 drm/panel-edp: fix i2c adapter leak on probe failure

In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure e.g. probe deferral and on driver unbind also if a devicetree redundantly uses the 'ddc-i2c-bus' property to point ...

CVE-2026-89812

This vulnerability affects the drm/amdgpu driver in the Linux kernel . The MES (Micro Engine Scheduler) scheduler ring uses no_scheduler = true, causing it to be skipped by the force-completion loop in amdgpu_device_pre_asic_reset(). Its polling fence hw value resides in wb (GTT) memory that surv...

CVE-2026-76557

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import permission ...

kernel: rxrpc: Fix potential UAF after skb_unshare() failure

A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability arises when the system attempts to unshare a packet buffer, and the operation fails due to an allocation issue. This failure can lead to a Use-After-Free UAF condition, where the system attempts to access memory that has...

ROS-20260916-73-0021

The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0057

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0066

The vulnerability of the fs/pstore/ramcore.c component in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0043

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-93524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunxi-cir media remote control rc component where the system fails to unregister the rc device during a probe failure. When rc register device succeeds but...

ROS-20260916-73-0046

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0014

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0015

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0020

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0036

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260916-73-0038

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-93750

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.20.0 through 9.20.27 BIND 9 versions 9.21.0 through 9.21.25 BIND 9 versions 9.20.9-S1 through 9.20.27-S1 Description An issue occurs when the software is loaded with a named.conf file that lacks a global options block. In thi...