CVE-2026-90070 tpm: st33zp24: Return zero on status read failure

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24status ignores the result of the transport read and returns data even when no byte was received. The I2C transport, for example, skips i2cmasterrecv when the register-sele...

CVE-2026-90070

CVE-2026-90070 affects the Linux kernel TPM driver for the st33zp24 chip. The st33zp24_status() function ignores the result of the transport read, returning data even when no byte was received. With the I2C transport , for example, the function skips i2c_master_recv() when the register-select wri...

CVE-2026-25278

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2026-25278 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2026-25278

CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...

CVE-2026-25278 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

EUVD-2026-81326

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2026-25278: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2026-93051: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: ad525xdpot: use driver core groups for sysfs files addpotprobe creates per-RDAC sysfs files manually and then optionally creates the command sysfs group. This leaves probe responsible for rolling back partial sysfs state an...

CVE-2026-93159: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

CVE-2026-90360: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regulator: core: use systemfreezablewq for init complete work scheduledelayedwork uses systemwq, which is non-freezable, allowing regulatorinitcompletework to run concurrently with system suspend. This work fires 30s after boot t...

PT-2026-94570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the NFC PN533 driver where the request skb socket buffer can be freed while the transport is still using it. This occurs because pn533 send async publishes the...

CVE-2026-90070: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24status ignores the result of the transport read and returns data even when no byte was received. The I2C transport, for example, skips i2cmasterrecv when the register-sele...

PT-2026-94145

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs during the processing of I2C transfer requests. This issue is caused by a race condition, which is a situation where the timing or order...

CVE-2026-90222: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: hold a reference to the request skb during sendframe pn533sendasync publishes the command and then calls dev-phyops-sendframe. Once dev-cmd is set, an incoming frame can be matched to this command: the I2C threaded IR...

PT-2026-94708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the regulator core where schedule delayed work utilizes system wq, a non-freezable workqueue. This allows the regulator init complete work function to execute...

PT-2026-94866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the teardown of Display Manager DM I2C adapters. Because these adapters may remain visible to userspace while the teardown process is active, a concurrent...

PT-2026-94897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs when an em28xx USB device using the i2c tvp5150 driver is disconnected. This happens because the tvp5150 i2c module utilizes v4l2 async, while the em28xx driver does not. ...

CVE-2026-90126: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind pcf8563clkoutregisterclk registers the CLKOUT clock provider with ofclkaddprovider, but nothing ever unwinds it: there is no ofclkdelprovider call and the driver has no remove...

AZL-101520 CVE-2026-89983 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice sysfs attribute stays writable until devicedel. A write racing with...