Linux Distros Unpatched Vulnerability : CVE-2026-64492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger...

CVE-2026-64504: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count bmc150accelfifoflush copies the number of samples the device reports in its hardware FIFO into an on-stack buffer u16 bufferBMC150ACCELFIFOLENGTH 3; which is sized fo...

PT-2026-64715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the gp2ap002 read raw function. The function invokes pm runtime get sync to manage power before reading the lux value; however, if the gp2ap0...

CVE-2026-64494: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...

Linux Distros Unpatched Vulnerability : CVE-2026-64500

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: lpc32xxadcprobe in drivers/iio/adc/lpc32xxadc.c registers its...

PT-2026-64716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Linux kernel within the bmg160 gyro driver. The functions bmg160 get filter and bmg160 set filter iterate through the bmg160 samp freq table array to...

Linux Distros Unpatched Vulnerability : CVE-2026-64503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when...

Linux Distros Unpatched Vulnerability : CVE-2026-64494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it...

CVE-2026-64497: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELDGET. Create new macros for bit manipulation in combination with manual bit manipulation being replaced with FIELDGET. The...

CVE-2026-64496: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...

PT-2026-64724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kxsd9 write raw function where a runtime Power Management PM reference is acquired using pm runtime get sync but is not released when a scale with a non-zero integ...

PT-2026-64718

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A sign-extension bug exists in the scd30 chemical IIO driver. The issue occurs when a float32 value is bitwise ANDed with BIT31, resulting in a value of 0xFFFFFFFF7FFFFFFF that corrupts...

Linux Distros Unpatched Vulnerability : CVE-2026-64498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in...

CVE-2026-64492: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...

CVE-2026-64501: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix CS held asserted and state leaks In adsigmadeltasingleconversion, setmodeADSDMODEIDLE and disableone were called from the out: block while keepcsasserted was still true. This caused any SPI transfer...

CVE-2026-64498: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in commit 9a2e1233d38c "iio: buffer: hw-consumer: remove redundant scanmask flexible array". Before that change, the scan mask storage was...

PT-2026-64723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad sigma delta clear pending event function where it incorrectly falls through to the status register read path for devices that have has registers set to false an...

CVE-2026-64495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...

USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

USN-8604-1 linux-azure-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...