CVE-2026-93825 spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()

In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spigetdeviceid in spigetdevicematchdata Prevent NULL pointer dereference when spigetdeviceid returns NULL, which can happen when using driveroverride without matching SPI ID entry...

CVE-2026-93825

The Linux kernel contains a vulnerability where a NULL pointer dereference can occur within the spi subsystem. Specifically, the function spi_get_device_match_data() fails to perform a NULL check on the return value of spi_get_device_id(). This issue can be triggered when using driver_override wi...

EUVD-2026-86165

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

CVE-2026-93286 net: appletalk: fix NULL pointer dereference in aarp_send_ddp()

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

CVE-2026-93286

The Linux kernel contains a NULL pointer dereference vulnerability in the Appletalk network stack. The aarp_send_ddp() function calls atalk_find_dev_addr(dev) without verifying if the device has an AppleTalk interface configured (i.e., dev->atalk_ptr is NULL). This leads to a crash when access...

CVE-2026-93286 net: appletalk: fix NULL pointer dereference in aarp_send_ddp()

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability arises from the fact that the function vdusevalidateconfig only checks the upper bound of vq Align, without verifying that the alignment value must be a power of two and not less than VRINGUSEDALIGNSIZE. As a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the improper handling of null values by the BPF verifier when processing the bpfrefcountacquire function for borrowing RCU kptr. This can lead to a null pointer dereferencing, as the verifier may treat...

EUVD-2026-86146

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-93274

A null pointer dereference vulnerability exists in the Linux kernel within the pinctrl: bcm2835 component. The issue occurs when the devm_pinctrl_register() function fails; the bcm2835_pinctrl_probe() function incorrectly calls gpiochip_remove() before gpiochip_add_data() has registered the GPIO ...

CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-93273

The Linux kernel contains a vulnerability in the tps6594 regulator driver within the tps6594_regulator_probe() function. A multi-phase configuration loop fails to release node references (np, intermediate parent, and np_pmic_parent) via of_node_put(), resulting in a reference leak during each ite...

CVE-2026-93273 regulator: tps6594: Fix device node reference leaks in multiphase loop

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

EUVD-2026-86145

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

CVE-2026-93273 regulator: tps6594: Fix device node reference leaks in multiphase loop

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

EUVD-2026-86135

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-93263 clk: eswin: Zero-initialize stack-allocated clk_init_data

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-93263 clk: eswin: Zero-initialize stack-allocated clk_init_data

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-93263

The Linux kernel contains a vulnerability where the eswin driver fails to properly initialize stack-allocated clk_init_data structures within the eswin_clk_register_pll() and eswin_register_clkdiv() functions. Because these structures are only partially initialized, leftover stack garbage in unin...