CVE-2026-90125 smb: client: fix request buffer leak in smb2_new_read_req()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix request buffer leak in smb2newreadreq smb2newreadreq allocates the request buffer with smb2plainreqinit but only publishes it to the caller with buf = req at the very end of the function. Two error returns sit in...

CVE-2026-90125

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix request buffer leak in smb2newreadreq smb2newreadreq allocates the request buffer with smb2plainreqinit but only publishes it to the caller with buf = req at the very end of the function. Two error returns sit in...

CVE-2026-90124

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...

CVE-2026-90124 irqchip/renesas-rzg2l: Fix loss of interrupt

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...

EUVD-2026-81716

In the Linux kernel, the following vulnerability has been resolved: irqchip/ast2700-intc: Avoid allocating in the irqdomain activate callback The interrupt core calls the irqdomainactivate callback from setupirq with desc-lock held and interrupts disabled. Both aspeedintc1irqdomainactivate and...

CVE-2026-90123

In the Linux kernel, the following vulnerability has been resolved: irqchip/ast2700-intc: Avoid allocating in the irqdomain activate callback The interrupt core calls the irqdomainactivate callback from setupirq with desc-lock held and interrupts disabled. Both aspeedintc1irqdomainactivate and...

CVE-2026-90123 irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback

In the Linux kernel, the following vulnerability has been resolved: irqchip/ast2700-intc: Avoid allocating in the irqdomain activate callback The interrupt core calls the irqdomainactivate callback from setupirq with desc-lock held and interrupts disabled. Both aspeedintc1irqdomainactivate and...

CVE-2026-90123

CVE-2026-90123 affects the Linux kernel irqchip/ast2700-intc driver (Aspeed AST2700 interrupt controller). The root cause is that fwnode_device_is_compatible() performs a GFP_KERNEL memory allocation, which is unsafe in the irq_domain_activate() callback context — a path invoked from __setup_irq(...

CVE-2026-90123 irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback

In the Linux kernel, the following vulnerability has been resolved: irqchip/ast2700-intc: Avoid allocating in the irqdomain activate callback The interrupt core calls the irqdomainactivate callback from setupirq with desc-lock held and interrupts disabled. Both aspeedintc1irqdomainactivate and...

EUVD-2026-81714

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

CVE-2026-90121 irqchip/gic-v5: Clear per-CPU IRS data on teardown

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

CVE-2026-90121

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

EUVD-2026-81715

In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize onl...

CVE-2026-90122

In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize onl...

CVE-2026-90122

CVE-2026-90122 affects the Linux kernel in the visconti clock driver . The function visconti_clk_register_gate() fills in init.parent_data but assumes init.parent_names is NULL; however, this member is left uninitialized in the clk_init_data structure, which can cause a crash when CONFIG_INIT_STA...

CVE-2026-90121

CVE-2026-90121 affects the Linux kernel GICv5 interrupt controller driver (irqchip/gic-v5). During IRS (Interrupt Routing Structure) affinity setup, an IRS pointer and IAFFID state are published in per-CPU data before the remaining initialization can fail. On the error path and normal teardown, t...

CVE-2026-90122 clk: visconti: Make sure clk_init_data is fully initialized

In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize onl...

CVE-2026-90121 irqchip/gic-v5: Clear per-CPU IRS data on teardown

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without...

EUVD-2026-81713

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

CVE-2026-90120 irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...