USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter iterates through bmg160sampfreqtable to find an entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i ...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332setvalue enables the Vcc regulator on every write of a non-zero value and disables it on every write of zero, without tracking the channel’s current state. Since the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference via pmruntimegetsync, but returns -EINVAL directly when a scale with a non-zero integer part is requested, thereby skipping...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count bmc150accelfifoflush copies the number of samples the device reports in its hardware FIFO into an on-stack buffer u16 bufferBMC150ACCELFIFOLENGTH 3; which is sized fo...

CVE-2026-89939

A flaw was found in the Linux kernel's iio: chemical: atlas-sensor driver. This vulnerability occurs when the atlasbufferpostenable function acquires a Power Management PM reference but fails to release it if an interrupt setup operation atlassetinterrupt does not complete successfully. This...

CVE-2026-89936

A flaw was found in the Linux kernel's iio: dac: m62332 driver. The m62332setvalue function incorrectly manages the reference count for the Vcc regulator. When a channel's value is changed directly from one non-zero value to another, the regulator is enabled multiple times, but only disabled once...

SUSE CVE-2026-98662

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irqwork after freeirq The threaded IRQ handler queues data-work through irqworkqueue so the trigger is polled from a per-CPU context. freeirq does not flush an irqwork the handler already queued, s...

SUSE CVE-2026-98671

In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If devmthermalofzoneregister fails, probe returns without unregistering the IIO map array or disabling runtime PM. Jump to errmap to release them...

SUSE CVE-2026-98674

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...

CVE-2026-89941

A flaw was found in the Linux kernel's IIO Industrial I/O buffer component. The iiodmafence implementation incorrectly uses kfree instead of kfreercu for releasing DMA fence objects. This improper memory deallocation can lead to a use-after-free vulnerability. An attacker could potentially exploi...

SUSE CVE-2026-98675

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000ST1CROSSINGDEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000ST1DIPCBIT bit 25. Pha...

SUSE CVE-2026-98663

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

SUSE CVE-2026-98666

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serialnumber file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does not wait for a read ...

SUSE CVE-2026-98670

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynqunmaskwork via scheduledelayedwork; that work is cleared by a devm callback. Register the devm callback befo...

CVE-2026-98671

A flaw was found in the sun4i-gpadc-iio driver within the Linux kernel. When device initialization fails during thermal zone registration, the driver returns without unregistering the Industrial I/O IIO map or disabling runtime power management. A local user could trigger this failure path to cau...

CVE-2026-98668

A flaw was found in the Linux kernel's Industrial I/O IIO subsystem. This vulnerability allows information disclosure when the kernel processes unaligned data buffers with timestamps enabled. Because the allocated buffer is not properly cleared before being shared with user space, a local user ca...

CVE-2026-98669

A flaw was found in the Linux kernel's Industrial I/O IIO subsystem. During device unregistration, the kernel disables and deactivates device buffers without acquiring the required lock to synchronize teardown with active buffer-mode claims. A local user could exploit this race condition to cause...

CVE-2026-98666

A flaw was found in the Linux kernel's Industrial I/O IIO adis16136 gyroscope driver. The driver fails to properly synchronize debugfs read operations during device unbinding, allowing an active read to continue after the underlying device data structures have been freed. A local user with access...

CVE-2026-98663

A flaw was found in the Linux kernel's ADIS16480 Industrial I/O IIO driver. The driver fails to protect debug file system debugfs read operations against concurrent device removal. A local attacker with access to debugfs can exploit this race condition by reading firmware attributes while unbindi...