CVE-2026-90222

CVE-2026-90222 is a use-after-free race condition in the Linux kernel's NFC PN533 driver (nfc/pn533). When __pn533_send_async() publishes a command and invokes send_frame(), an incoming I2C frame can trigger command completion, which frees the request skb via consume_skb(). On the I2C transport, ...

CVE-2026-90070

CVE-2026-90070 affects the Linux kernel TPM driver for the st33zp24 chip. The st33zp24_status() function ignores the result of the transport read, returning data even when no byte was received. With the I2C transport , for example, the function skips i2c_master_recv() when the register-select wri...