Linux Distros Unpatched Vulnerability : CVE-2026-90215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: ubi: Release device reference on busy detach ubidetachmtddev obtains a device reference through ubigetdevice before checking whether the UBI device is busy...

Linux Distros Unpatched Vulnerability : CVE-2026-93049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswapaddmtd, debugfs setup failure after successful blktrans registration can free mbddev twic...

Linux Distros Unpatched Vulnerability : CVE-2026-90216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubi: Fix rollback for explicit UBI device numbers ubiinitattach rolls back module initialization failures by scanning ubidevices0..i-1, where i is the mtd=...

Linux Distros Unpatched Vulnerability : CVE-2026-93048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: part: reject MTDPARTOFSRETAIN in mtdaddpartition mtdaddpartition does not reject the special offset value MTDPARTOFSRETAIN -3, which leads to a WARNON in...

CVE-2026-93048

In the Linux kernel, the following vulnerability has been resolved: mtd: part: reject MTDPARTOFSRETAIN in mtdaddpartition mtdaddpartition does not reject the special offset value MTDPARTOFSRETAIN -3, which leads to a WARNON in addmtddevice when called through the BLKPG ioctl on NAND devices. The...

CVE-2026-90216

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubiinitattach rolls back module initialization failures by scanning ubidevices0..i-1, where i is the mtd= parameter index. That assumes the parameter index matches the UBI device...

DEBIAN-CVE-2026-90215

In the Linux kernel, the following vulnerability has been resolved: mtd: ubi: Release device reference on busy detach ubidetachmtddev obtains a device reference through ubigetdevice before checking whether the UBI device is busy. The busy return path drops ubi-refcount but leaves the device...

CVE-2026-93048

CVE-2026-93048 affects the Linux kernel MTD partition subsystem. The function mtd_add_partition() fails to reject the special offset value MTDPART_OFS_RETAIN (-3) , which was originally added only for the static partition table path. When passed via the BLKPG ioctl on NAND devices, the RETAIN siz...

CVE-2026-90216

CVE-2026-90216 affects the UBI (Unsorted Block Images) module in the Linux kernel . The vulnerability resides in ubi_init_attach(), which rolls back module initialization failures by scanning only ubi_devices[0..i-1], where i is the mtd= parameter index. This logic incorrectly assumes the paramet...

CVE-2026-90215

CVE-2026-90215 is a reference-count leak in the Linux kernel's MTD UBI (Unsorted Block Images) subsystem. The function ubi_detach_mtd_dev() obtains a device reference via ubi_get_device() before checking whether the UBI device is busy; on the busy return path it drops ubi->ref_count but leaves...

CVE-2026-90216 ubi: Fix rollback for explicit UBI device numbers

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubiinitattach rolls back module initialization failures by scanning ubidevices0..i-1, where i is the mtd= parameter index. That assumes the parameter index matches the UBI device...

CVE-2026-90215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: ubi: Release device reference on busy detach ubidetachmtddev obtains a device reference through ubigetdevice before checking whether the UBI device is busy. The busy return path drops ubi-refcount but leaves the device...

CVE-2026-90216: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubiinitattach rolls back module initialization failures by scanning ubidevices0..i-1, where i is the mtd= parameter index. That assumes the parameter index matches the UBI device...

DEBIAN-CVE-2026-89954

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image information regioncount to walk entries from a fixed local array. Th...

AZL-101358 CVE-2026-89954 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image information regioncount to walk entries from a fixed local array. Th...

AZL-101228 CVE-2026-89952 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: validate ONFI extended parameter page sections nandflashdetectextparampage allocates the length declared by the ONFI parameter page, then treats the data as a fixed header followed by variable-length sections. It...

CVE-2026-89954

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image information regioncount to walk entries from a fixed local array. Th...

DEBIAN-CVE-2026-89952

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: validate ONFI extended parameter page sections nandflashdetectextparampage allocates the length declared by the ONFI parameter page, then treats the data as a fixed header followed by variable-length sections. It...

EUVD-2026-80554

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image information regioncount to walk entries from a fixed local array. Th...

CVE-2026-89954 mtd: afs: validate v2 image info bounds

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block inside the current erase block, then uses the image information regioncount to walk entries from a fixed local array. Th...