CVE-2026-90341 firmware: coreboot: Validate table bounds

In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...

CVE-2026-90341

In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...

CVE-2026-90341 firmware: coreboot: Validate table bounds

In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...

EUVD-2026-82002

In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboottablepopulate bounds checks limit individual entries to the mapped length. However, coreboottableprobe replaces the platform resource length with header and table siz...

CVE-2026-90341

CVE-2026-90341 affects the Linux kernel's coreboot firmware driver . The vulnerable function coreboot_table_probe() replaces the platform resource length with header and table sizes supplied by firmware before mapping the full table. A malformed table can overflow the 32-bit size addition or adve...

CVE-2026-90340

CVE-2026-90340 affects the Linux kernel pinctrl generic subsystem. The root cause is a memory leak in the error path of pinctrl_generic_to_map(): when subsequent operations (such as pinctrl_utils_add_map_mux(), pinctrl_generic_add_group(), or pinconf_generic_parse_dt_config()) fail after partial ...

CVE-2026-90340 pinctrl: generic: free maps on pinctrl_generic_to_map() failure

In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrlgenerictomap failure pinctrlgenerictomap parses DT configuration and allocates pinctrl maps via pinctrlutilsreservemap. If subsequent steps such as pinctrlutilsaddmapmux,...

EUVD-2026-82001

In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrlgenerictomap failure pinctrlgenerictomap parses DT configuration and allocates pinctrl maps via pinctrlutilsreservemap. If subsequent steps such as pinctrlutilsaddmapmux,...

CVE-2026-90340

In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrlgenerictomap failure pinctrlgenerictomap parses DT configuration and allocates pinctrl maps via pinctrlutilsreservemap. If subsequent steps such as pinctrlutilsaddmapmux,...

CVE-2026-90340 pinctrl: generic: free maps on pinctrl_generic_to_map() failure

In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrlgenerictomap failure pinctrlgenerictomap parses DT configuration and allocates pinctrl maps via pinctrlutilsreservemap. If subsequent steps such as pinctrlutilsaddmapmux,...

CVE-2026-90338 serial: amba-pl011: keep console clock enabled for atomic writes

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls clkenable, which takes the common-clk enablelock. Under PREEMPTRT th...

CVE-2026-90339 powerpc/syscall: Fix syscall skip handling for seccomp and ptrace

In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace After enabling GENERICENTRY on PowerPC, syscallenterfromusermode returns -1 as a sentinel to signal that seccomp or ptrace has intercepted the syscall and already...

CVE-2026-90338 serial: amba-pl011: keep console clock enabled for atomic writes

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls clkenable, which takes the common-clk enablelock. Under PREEMPTRT th...

CVE-2026-90339

In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace After enabling GENERICENTRY on PowerPC, syscallenterfromusermode returns -1 as a sentinel to signal that seccomp or ptrace has intercepted the syscall and already...

CVE-2026-90338

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls clkenable, which takes the common-clk enablelock. Under PREEMPTRT th...

CVE-2026-90339

CVE-2026-90339 is a Linux kernel vulnerability affecting the PowerPC architecture (both ppc32 and ppc64). After enabling GENERIC_ENTRY , the sentinel value -1 returned by syscall_enter_from_user_mode() to indicate that seccomp or ptrace had already set a return value was not handled correctly in ...

EUVD-2026-82000

In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace After enabling GENERICENTRY on PowerPC, syscallenterfromusermode returns -1 as a sentinel to signal that seccomp or ptrace has intercepted the syscall and already...

EUVD-2026-81999

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls clkenable, which takes the common-clk enablelock. Under PREEMPTRT th...

CVE-2026-90339 powerpc/syscall: Fix syscall skip handling for seccomp and ptrace

In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace After enabling GENERICENTRY on PowerPC, syscallenterfromusermode returns -1 as a sentinel to signal that seccomp or ptrace has intercepted the syscall and already...

EUVD-2026-81998

In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serialcoreaddoneport allocates uport-ttygroups after uartconfigureport, which may register the console. If the allocation fails, the driver unwinds the po...