CVE-2026-98210

A flaw was found in the Linux kernel's mxcmmc host driver. A local user with administrative privileges could trigger this vulnerability by unbinding or removing the device, leading to a Denial of Service DoS or potential arbitrary code execution. The driver fails to cancel active background tasks...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Drivers: USB: Host: Fixed a deadlock in oxubussuspend There is a deadlock in oxubussuspend, as shown below: Thread 1 | Thread 2 | timeraction oxubussuspend | modtimer spinlockirq //1 | Wait for a while ... | oxuwatchdog...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nvmeprreadkeys function in the drivers/nvme/host/pr.c module of the Linux kernel relates to unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100135 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring...

CVE-2026-72483

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function handles USB hub class requests to the virtual root hub. In the default branches of both the ClearPortFeature and SetPortFeature switc...

drivers/usb/dwc3/host.c Heap Buffer Overflow DoS

The vulnerability of the dwc3hostinit function in the drivers/usb/dwc3/host.c file of the DesignWare USB3 controller support driver in the Linux operating system is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

mmc/host/alcor.c Heap Buffer Overflow DoS

The vulnerability of the alcorpcisdmmcdrvprobe function in the mmc/host/alcor.c driver module for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath12k – Prevent sending WMI commands to firmware during a firmware crash Currently, we encounter the following kernel call trace when a firmware crash occurs. This occurs because the host sends WMI commands to the...

CVE-2026-43324

A flaw was found in the Linux kernel's dummy-hcd driver. This vulnerability stems from an interrupt synchronization error where emulated interrupts can occur after the system attempts to synchronize interrupt handlers. This timing issue creates a race condition, potentially allowing a callback...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the xhciallocstreaminfo function in the drivers/usb/host/xhci-mem.c module of the Linux device driver for USB devices is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause service...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the amdprobe function in the drivers/mmc/host/sdhci-pci-core.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux driver USB Host Max3421 HCD Heap Buffer Overflow DoS

The vulnerability of the drivers/usb/host/max3421-hcd.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux NVME Buffer Overflow DoS

The vulnerability of the nvmfregread32 function in the drivers/nvme/host/fabrics.c module of the Linux kernel’s NVME support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260113-7380

A vulnerability in the drivers/nvme/host component of the Linux operating system kernel is related to thread locking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

EUVD-2025-206281

Espressif ESP-IDF USB Host HID Human Interface Device Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface...

nvme TCP DoS

Vulnerability of the nvmetcpsetupctrl function in the driver/nvme/host/tcp.c module – The Linux kernel’s NVME support driver has a vulnerability where memory is not released after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux USB Host Process Isoc TD DoS

Vulnerability of the processisoctd function in the drivers/usb/host/xhci-ring.c module – The driver for supporting USB devices in Linux kernels is vulnerable when an operation is performed outside of the buffer boundaries. Exploiting this vulnerability could allow a attacker to cause a service...

kernel: scsi: ufs: core: Fix use-after free in init error and remove paths

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devmblkcryptoprofileinit registers a cleanup handler to run when the associated platform- device is being released. For UFS, the crypto private data and pointers...

Linux NVME Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the nvmepciNRMs function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987636 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: usb: host: Fix deadlock in oxubussuspend There is a deadlock in oxubussuspend, which is...