The vulnerability of the FIFO event processing mechanism in Xen hypervisors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FIFO event processing mechanism in Xen hypervisors is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

UBUNTU-CVE-2026-98208

In the Linux kernel, the following vulnerability has been resolved: mmc: sdiouart: fix xmitfifo leak when the port table is full sdiouartaddport allocates the transmit fifo before claiming a slot in sdiouarttable. When all UARTNR slots are taken, it returns -EBUSY with the fifo still allocated, b...

PT-2026-106537

In the Linux kernel, the following vulnerability has been resolved: mmc: sdio uart: fix xmit fifo leak when the port table is full sdio uart add port allocates the transmit fifo before claiming a slot in sdio uart table. When all UART NR slots are taken, it returns -EBUSY with the fifo still...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_52765)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202652765 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc (crlsa-2026_52761)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202652761 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

CVE-2026-97481

A flaw was found in the Linux kernel's 8250 serial port driver. An attacker communicating over the serial interface can cause a Denial of Service DoS by flooding the port with messages during the system startup phase. Due to missing error handling for First-In, First-Out FIFO buffer interrupts, t...

CVE-2026-97481 serial: 8250: fix possible ISR soft lockup

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO...

CVE-2026-97481

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO...

PT-2026-98100

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A soft lockup can occur in the Interrupt Service Routine ISR when the host is flooded with messages during the startup phase. This issue stems from the lack of handling for the FIFO erro...

Linux Distros Unpatched Vulnerability : CVE-2026-97481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup...

SUSE CVE-2026-93123

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: do not advance stale DMA completions The qcom GENI serial DMA TX completion path advances the transmit fifo by the number of bytes recorded in port-txremaining. If uartflushbuffer runs after the hardware has...

SUSE CVE-2026-89875

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

CVE-2026-93123: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: do not advance stale DMA completions The qcom GENI serial DMA TX completion path advances the transmit fifo by the number of bytes recorded in port-txremaining. If uartflushbuffer runs after the hardware has...

[SECURITY] [DLA 4780-1] urwid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4780-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2026 https://wiki.debian.org/LTS -...

CVE-2026-14986

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

CVE-2026-14986 Out-of-bounds write in it51xxx I2C target FIFO ISR on oversized write transaction

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

EUVD-2026-78204

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

CVE-2026-14986

An out-of-bounds write in the ITE it51xxx I2C driver in Zephyr RTOS (drivers/i2c/i2c_ite_it51xxx.c) occurs when the driver operates as an I2C target in buffer mode. The FIFO interrupt handler target_i2c_isr_fifo() copies host-supplied data into a fixed 256-byte buffer but performs its bounds chec...

CVE-2026-86836

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes FIFOs under a predictable path derived from the agent name and a hash of the workload's runtime configuration. If a directory or FIFO already exists at that path when the agent...

CVE-2026-86836

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes FIFOs under a predictable path derived from the agent name and a hash of the workload's runtime configuration. If a directory or FIFO already exists at that path when the agent...