Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It arises because the HID Steam driver still allows callbacks to be scheduled during sequence deallocation, resulting in null pointers pointing to freed Steam structures. This may lead to memory corruption or crashes...

PT-2026-121916

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID steam component where the code for unregistering a battery was omitted during a previous refactor if subsequent registration steps failed. This flaw allows a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.14. It stems from the ASoC qcom lpass-cpu driver’s use of DAI IDs as indices for the variant-daidriver array when configuring DAI, rather than using cyclic indices. This results in out-of-bounds writes or improper access to the DAI table...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.10.270 up to and including 5.11, from 5.15.221 up to and including 5.16, from 6.1.188 up to and including 6.2, from 6.6.157 up to and including 6.6.160, from 6.12.109 up to and including 6.12.114, from 6.18.50 up to and including...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It stems from GVE failing to release XSK buffers when stopping queues and resetting ring states, resulting in a leak of XSK buffers submitted to the NIC...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from improper setting of the skipreleasebitmap during MPWQE refill retries, resulting in XSK buffer reuse via stale pointers and potentially leading to memory corruption...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.157 and 6.6.160, as well as in version 6.10. This vulnerability stems from an inconsistency between the number of nlinearranges in TPS65224 BUCK2, BUCK3, and BUCK4 descriptors and the actual number of elements in the...

PT-2026-121912

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC qcom lpass-cpu component where the probe code incorrectly uses the dai id a hardware port ID to index the variant-dai driver table when configuring a DAI with...

PT-2026-121856

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/gma500 component where the xfer read function fails to handle timeout and signal returns from wait for completion interruptible timeout during Oaktrail HDMI I2...

PT-2026-121890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel on arm64 architecture where the damon ptep mkold function fails to use a page-aligned address. When damon va prepare access check selects a random byt...

PT-2026-121970

In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT UMOUNT in clone mnt MNT UMOUNT gets raised on a mount that umount tree or umount one has taken out of its namespace. It's never cleared. detach mounts unhooks a mount that carries it instead of...

PT-2026-122024

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

PT-2026-121855

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Integrity Measurement Architecture IMA where the system fails to return an error early when a file's extended attributes xattrs cannot be changed. During early boo...

PT-2026-121930

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid-non aql packets when a frame goes to the hardware queue. The completion path decrements the counter again. For an MLO peer, the hardware...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.19. It stems from insufficient loop checks on mount namespaces when performing recursive bind mounts; this may result in copying file descriptors from other mount namespaces, leading to mount namespace leaks and memory consumption...

PT-2026-122011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mmc sdhci-sprd driver where the sdhci sprd remove function fails to perform the necessary runtime Power Management PM cleanup. While sdhci sprd probe enables runti...

PT-2026-121891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The adjust idledly function contains several issues that can lead to kernel panics or incorrect behavior. A divide-by-zero error occurs if xe gt clock init fails to recognize the crystal...

PT-2026-121841

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the SEV init failure path. The function sev platform init handle init ex path calls rmp mark pages firmware with the locked parameter set to false, even though th...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.9. It stems from improper passing of lock state when calling rmpmarkpagesfirmware in the SEV initialization failure path, resulting in a deadlock during the cleanup path after RMPUPDATE fails...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from improper handling of kprobe reentrancy during single-step execution in arm64 kernels when KPROBEHITSS is set. Additionally, overwriting the...