CVE-2026-90364

CVE-2026-90364 affects the Linux kernel ACPI processor driver. In acpi_processor_driver_init(), the cpufreq policy notifier is registered before the ACPI processor driver and CPU hotplug state are set up. If driver_register() or cpuhp_setup_state() fails, the error path unregisters the ACPI proce...

EUVD-2026-82015

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915pciinithif2 was called unconditionally and again inside the WED-inactive branch. The helper increments the global hifidx, writes the PCIe RECOGID register and tak...

CVE-2026-90354 wifi: mt76: mt7915: fix double hif2 init on the non-WED path

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915pciinithif2 was called unconditionally and again inside the WED-inactive branch. The helper increments the global hifidx, writes the PCIe RECOGID register and tak...

CVE-2026-90354 wifi: mt76: mt7915: fix double hif2 init on the non-WED path

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915pciinithif2 was called unconditionally and again inside the WED-inactive branch. The helper increments the global hifidx, writes the PCIe RECOGID register and tak...

CVE-2026-90354

CVE-2026-90354 affects the Linux kernel mt76/mt7915 Wi-Fi driver. The function mt7915_pci_init_hif2() was invoked unconditionally and a second time inside the WED-inactive branch, causing the global hif_idx to be double-incremented, the PCIe RECOG_ID register to be written twice, and a device ref...

EUVD-2026-81991

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

CVE-2026-90330 HID: logitech-hidpp: Fix FF device cleanup on init failure

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidppffinit creates the input force-feedback device with inputffcreate, then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those...

CVE-2026-90188 null_blk: free global tag_set on init error path

In the Linux kernel, the following vulnerability has been resolved: nullblk: free global tagset on init error path If sharedtags is enabled, nullsetuptagset allocates the global tagset via nullinitglobaltagset. If device creation later fails, errdev destroys the default devices and calls...

CVE-2026-90188

CVE-2026-90188 affects the Linux kernel 's null_blk block driver. When shared_tags is enabled, null_setup_tagset() allocates a global tag_set via null_init_global_tag_set(). If device creation subsequently fails, the err_dev error path destroys the default devices and calls unregister_blkdev() bu...

CVE-2026-90164 smb/server: abort initialization when proc setup fails

In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbdserverinit calls ksmbdprocinit before creating the remaining proc entries and server subsystems. ksmbdprocinit tears down partial state on a procfs or percpucounter...

CVE-2026-90163 smb/server: call ksmbd_proc_cleanup() on module init failure

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

EUVD-2026-81756

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

Malicious code in kronos-init-carpo-transform (npm)

The package kronos-init-carpo-transform was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jsonp-init-command-bunyan (npm)

The package jsonp-init-command-bunyan was found to contain malicious code. --- Credit: OpenSSF source...

PT-2026-94403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usbatm atm init function where the ci range.vpi bits and ci range.vci bits fields are incorrectly initialized to a sentinel value of -1. These fields are...

PT-2026-94711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs in the Linux kernel when KMS initialization fails. Specifically, when the priv-kms init function including mdp4 kms init and mdp5 kms init fails, the displa...

PT-2026-94979

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/lima component where the lima vm create function is executed before the va start and va end variables are properly initialized. Consequently, these variables a...

PT-2026-94772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the tegra241 cmdqv init structures function during the initialization failure path. The issue arises when tegra241 cmdqv init vintf fails or during a subsequent...

PT-2026-94548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ntfs init from boot function within the ntfs3 file system. The issue occurs during the validation of Master File Table MFT cluster numbers read from the...

PT-2026-94424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq init function where quantum and initial quantum are computed using psched mtu without overflow checks. When a device has an excessively large Maximum Transmissi...