28 matches found
CVE-2026-98018
A flaw was found in the Linux kernel. A race condition in the Management Component Transport Protocol MCTP I3C driver occurs when device discovery releases a lock prematurely while a bus is simultaneously removed. A local user could exploit this synchronization flaw to access freed memory,...
CVE-2026-98018
A vulnerability exists in the Linux kernel within the net: mctp: i3c component. The root cause is that mctp_i3c_probe() drops the busdevs_lock prematurely after finding the matching bus. This allows a concurrent I3C_NOTIFY_BUS_REMOVE event to unregister and free the bus netdev before the probe ca...
CVE-2026-98018
In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...
CVE-2026-98018: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...
PT-2026-98681
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the MCTP I3C implementation where the mctp i3c probe function releases the busdevs lock prematurely after locating a matching bus. If a concurrent I3C NOTIFY B...
DEBIAN-CVE-2026-80951
In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested maxpayloadlen svci3cmasterhandleibi reads the IBI payload from the RX FIFO into the IBI slot. The loop is bounded by the hardware FIFO size SVCI3CFIFOSIZE, not by the slot size...
Linux Distros Unpatched Vulnerability : CVE-2026-68314
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with...
SUSE CVE-2026-68314
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
CVE-2026-68314
A flaw was found in the Linux kernel's MCTP I3C network module. When the i3cdriverregister function fails during module initialization, the system does not properly unregister notifiers and deallocate bus objects. This oversight leads to a memory leak, which could be exploited by a local attacker...
CVE-2026-68314
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
UBUNTU-CVE-2026-68314
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
CVE-2026-68314
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
CVE-2026-68314 net: mctp i3c: clean up notifier and buses if driver register fails
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
CVE-2026-68314 net: mctp i3c: clean up notifier and buses if driver register fails
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
PT-2026-69714
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mctp i3c mod init function where the I3C bus notifier is registered and existing buses are processed using i3c for each bus lockedmctp i3c bus add new, NULL before...
CVE-2026-68314: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...
EUVD-2025-9418
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-21903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mctp i3c: handle NULL header address daddr can be NULL if there is no neighbour table entry...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: - mctp i3c: handling of NULL header addresses - daddr can be NULL if there is no neighbour table entry present; in that case, the TX packet should be discarded. - saddr is usually set by the MCTP core, but NULL values are also...
Linux kernel mctp_i3c_header_create Heap Buffer Overflow DoS
The vulnerability of the mctpi3cheadercreate function drivers/net/mctp/mctp-i3c.c in the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...