PT-2026-121864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/ras component where the CPER ring overflow handling trusts the parsed entry size from the current ring contents when advancing the read pointer rptr. Corru...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the fact that the sdhcisprdremove function in drivers/mmc/host/sdhci-sprd.c fails to perform runtime PM cleanup. As a result, clocks managed by the runtime PM callback are disabled directly when the device is in a runtime suspend...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.16. It arises because memstickcheck checks before setting eject/removing; subsequent requests are silently discarded without any action being taken, causing the removal process to hang and blocking the work queue...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.5. It stems from the fact that vc4bocachedestroy in drm/vc4 fails to release the size list when clearing a BO cache during destruction; this results in memory leaks each time a BO is unbound...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.11. It arises because gpiodsetvalue in the ASoC adau1372 driver issues a warning when GPIO providers support sleep mode. However, powerdown GPIO operates only within process contexts and does not utilize the cansleep variant; this may resu...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability stemming from a race condition between intelrpsboost reading an outdated ACTIVE state and the queueing of rps-work. This results in RPS PM interrupt masking being lifted when GT is parked but no PM wakelock is held, potentially triggering an aler...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 4.4.281 up to 4.5, from 4.9.280 up to 4.10, from 4.14.244 up to 4.15, from 4.19.203 up to 4.20, from 5.4.140 up to 5.5, from 5.10.58 up to 5.11, from 5.13.10 up to 5.14, and specifically in version 5.14. The vulnerability arises because...

PT-2026-122014

In the Linux kernel, the following vulnerability has been resolved: dm-crypt: reject the lmk IV mode with AEAD ciphers A "capi:" table line that pairs an AEAD cipher with the lmk IV mode, for example "capi:gcmaes-lmk" with the integrity:28:aead option, causes an oops when it is loaded. lmk sets...

PT-2026-121879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the cpsw probe function registers devlink before registering CPSW ports. If the cpsw register ports function fails, the error handling path unregisters notifiers an...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It stems from a race condition related to the size of IPv6 routing notifications. When fib6infohwflagsset uses rt6nlmsgsize to set the skb size, it is subsequently filled by rt6fillnode. In Nexthop-compatible mode, concurrent...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises when threads exit via BINDERTHREADEXIT, causing pending work items to be canceled. This results in a loss of node reference count updates, leading to asynchronous updates between node delivery status and count status...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.11. It arises because SELinux fails to preserve NATIVELABELS when processing an initialized superblock in setmntopts; as a result, the NFSv4 file system exported via securitylabel is cleared of the shared nfsserver’s NFSCAPSECURITYLABEL...

PT-2026-121994

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV ALTERNATIVE EARLY for THEAD GHOSTWRITE errata probe ghostwrite only marks the CPU as vulnerable when it is called at the RISCV ALTERNATIVES EARLY BOOT stage, and the mitigation in ghostwrite enable...

PT-2026-121966

In the Linux kernel, the following vulnerability has been resolved: namespace: check a recursive bind mount for mount namespace loops do loopback refuses to bind mount the file of a mount namespace that is as old as the caller's or older because a mount namespace that holds a mount of its own fil...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.7. It stems from a race condition between addkey and restrictions on the keyring. keycreateorupdate reads a restrictlink snapshot prior to acquiring a lock on the target keyring; attackers with write permissions can exploit this stale...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.3. It occurs when, after a disk is removed but still in use, evictinodes releases s inodelistlock and then re schedules it; this causes the same set of inodes to be scanned repeatedly from the beginning of sinodes without being reclaimed. ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.7. It stems from an error path in altredaca10deviceadd and altrportbsetup, where dci structures are released prior to freeing the devres group. This allows access to memory that has been freed between releasing the dci and canceling the IR...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. This vulnerability stems from the failure to recognize UPIOAU type 4 UART types within setiofromupio. As a result, warnings may be generated when the 8250 driver attempts to detect unsupported UART types...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. It arises from a trust corruption entry size caused by an overflow in the CPER ring, resulting in no progress on read pointers. During recovery loops while holding the CPER ring mutex, the same location is checked...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 6.18.6 through 6.18.57 and 6.19. This vulnerability arises because gpiompsseirqenable schedules a work item before adding it to the priv-workers list; however, this work item may be omitted during a disconnection. As a result, after the USB...