145 matches found
The vulnerability of the itg3200_read_all_channels() function in the drivers/iio/gyro/itg3200_buffer.c file of various types of embedded sensors in the Linux operating system allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the itg3200readallchannels function in the drivers/iio/gyro/itg3200buffer.c file of various types of embedded sensors in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, acting remotely,...
MiracleLinux 8 : kernel-4.18.0-553.154.1.el8_10 (AXSA:2026-1678:68)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1678:68 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the MiracleLinux security...
CVE-2026-72480
A flaw was found in the Linux kernel's Industrial Input/Output IIO subsystem, specifically in the Xilinx Analog-to-Digital Converter ADC AMS driver. When handling events, the amseventtochannel function could attempt to access memory outside of its allocated boundaries if a matching channel is not...
Linux Distros Unpatched Vulnerability : CVE-2026-72481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel...
Linux Distros Unpatched Vulnerability : CVE-2026-72480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100508)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100508 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100338)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100338 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines dow...
CVE-2026-72479
CVE-2026-72479 affects the Linux kernel IIO MMA8452 accelerometer driver. The issue occurs in mma8452_read() when an I2C read call to i2c_smbus_read_i2c_block_data() fails but mma8452_set_runtime_pm_state() succeeds; in that path, mma8452_read() returns 0, causing mma8452_read_raw() to use an uni...
CVE-2026-72479 iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...
Oracle Linux 8 : kernel (ELSA-2026-52765)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-52765 advisory. - iio: event: Fix event FIFO reset race CKI Backport Bot RHEL-223364 CVE-2026-64496 Tenable has extracted the preceding description block directly from the...
Linux Distros Unpatched Vulnerability : CVE-2026-68089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer wi...
kernel security update
An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
RLSA-2026:52765 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...
CVE-2026-68089 iio: core: fix uninitialized data in debugfs
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 For more details about the security issues, including the impact, a CVSS scor...
RHEL 8 : kernel-rt (RHSA-2026:52761)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52761 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...
RHEL 8 : kernel (RHSA-2026:52765)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52765 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iio: event: Fix event FIFO reset race...
USN-8620-1: Linux kernel vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8595-3 linux-aws-6.8, linux-aws-fips vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8574-3: Linux kernel vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...