CVE-2026-93054

CVE-2026-93054 is a use-after-free vulnerability in the Linux kernel's UIO (Userspace I/O) driver. After device_add(), the UIO device becomes visible to userspace. If a subsequent setup step fails, __uio_register_device() unwinds the device but leaves idev->info pointing at a caller-owned stru...

CVE-2026-93054 uio: Fix stale info pointer in failed registration path

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...

EUVD-2026-82164

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...

CVE-2026-93054 uio: Fix stale info pointer in failed registration path

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...

EUVD-2026-82141

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

CVE-2026-92517 bpf, riscv: Fix extable handling for arena load_acquire

In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena loadacquire emitatomicldst returns 1 to have buildbody skip the zext after a sub-word loadacquire. The caller does "ret = ret ?: addexceptionhandler...", which skips addexceptionhandler ...

CVE-2026-90394 power: supply: sc2731_charger: cancel work on remove

In the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731charger: cancel work on remove The USB notifier and initial charger detection can schedule info-work. The remove path unregisters the notifier, but does not cancel queued or running work before the...

EUVD-2026-81968

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90257 Bluetooth: virtio_bt: avoid OOB read of build info string

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtiobt: avoid OOB read of build info string The virtbtsetupzephyr sends the Zephyr vendor command 0xfc08 Read Build Information and hands the response to btdevinfo and hcisetfwinfo as a "%s" string starting at skb-da...

EUVD-2026-81844

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MSFT: validate evtprefixlen against the response length readsupportedfeatures only checks that the response covers the fixed part of struct msftrpreadsupportedfeatures, which is 11 bytes: if skb-len evtprefixlen is an...

CVE-2026-90161 erofs: fix interlaced ztailpacking pclusters

In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should be block-aligned, and ztailpacking interlaced pclusters should be invalid at all. Currently, mkfs.erofs won't generate any interlaced...

CVE-2026-92957

creationtimestamp| type| source ---|---|--- 2026-09-17 16:01:15+00:00| seen| https://gist.github.com/ichintu/9f4093a6b4ddd813b30d10c5546af295 2026-09-17 16:10:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvq25ddenw2t 2026-09-17 17:00:10+00:00| seen|...

CVE-2026-92938

creationtimestamp| type| source ---|---|--- 2026-09-17 16:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpzkgbkv52n 2026-09-17 16:08:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvpzzov4kj25 2026-09-17 18:34:21+00:00| seen|...

CVE-2026-92950

creationtimestamp| type| source ---|---|--- 2026-09-17 15:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpxuq5hp72f 2026-09-17 16:09:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvq23rltdx2n 2026-09-17 18:34:21+00:00| seen|...

CVE-2026-92934

creationtimestamp| type| source ---|---|--- 2026-09-17 15:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpxctorhh2f 2026-09-17 16:08:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvpzyvtj2o2t 2026-09-17 16:16:04+00:00| seen|...

CVE-2026-81447

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...

CVE-2026-86533

creationtimestamp| type| source ---|---|--- 2026-09-17 14:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpvn7rqyh2w 2026-09-17 16:08:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvpzynw7fd2r...

CVE-2026-81447

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...

EUVD-2026-81669

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop API products, collections, and facets queries combine mandatory visibility guards with caller-supplied filters using the caller-controlled filterOperator. When filterOperator is OR, a predicate matching a hidden...