CVE-2026-80679

This vulnerability affects the Linux kernel in the s390/dasd subsystem. The dasd_release_space() function checks the is_ese() discipline function pointer before invoking it to determine whether a given device is an ESE DASD. The root cause is the use of a logical AND operator, which causes the fu...

CVE-2026-80679

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasdreleasespace checks the implementation of the isese discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND...

CVE-2026-80679 s390/dasd: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasdreleasespace checks the implementation of the isese discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND...

EUVD-2026-67555

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasdreleasespace checks the implementation of the isese discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND...

EUVD-2026-67533

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

CVE-2026-80658

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Fix null-ptr-deref in dwdpremove Attempting to access driver data in the platform driver -remove callback may lead to a null pointer dereference since there is no guaranty that the component -bind callback...

EUVD-2026-67534

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Fix null-ptr-deref in dwdpremove Attempting to access driver data in the platform driver -remove callback may lead to a null pointer dereference since there is no guaranty that the component -bind callback...

CVE-2026-80657 accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

CVE-2026-80658

CVE-2026-80658 affects the Linux kernel 's drm/rockchip dw_dp platform driver. The root cause is a null pointer dereference in the ->remove() callback: it calls platform_get_drvdata(), but if the component ->bind() callback never executed—because an unrelated error caused an early return fr...

CVE-2026-80658 drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Fix null-ptr-deref in dwdpremove Attempting to access driver data in the platform driver -remove callback may lead to a null pointer dereference since there is no guaranty that the component -bind callback...

CVE-2026-80657

CVE-2026-80657 affects the Linux kernel driver accel/amdxdna . The root cause is a NULL pointer dereference : the management mailbox channel cleanup helpers xdna_mailbox_free_channel() and xdna_mailbox_stop_channel() can be invoked from error-handling paths after the management channel (mgmt_chan...

CVE-2026-80655

In the Linux kernel , the zynqmp_power driver (Xilinx ZynqMP SoC) contained a race condition in event registration. The work structures used by suspend and subsystem-restart callbacks were allocated and initialized after the call to register_event(). If firmware triggered an event during this win...

CVE-2026-80655 soc: xilinx: Fix race condition in event registration

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent. However, the work structures zynqmppminitsuspendwork and...

EUVD-2026-67531

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent. However, the work structures zynqmppminitsuspendwork and...

EUVD-2026-67527

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks pdev-bus when computing segmentid: u8 segmentid = pdev-bus ? pcidomainnrpdev-bus : 0; But the next two lines unconditionally dereference...

CVE-2026-80651

CVE-2026-80651 is a NULL pointer dereference in the Linux kernel's drivers/crypto/ccp/sev-dev-tsm.c , specifically in the dsm_create() function. The function checks whether pdev->bus is NULL when computing segment_id, but immediately afterward unconditionally dereferences pdev->bus via pcie...

CVE-2026-80651 crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks pdev-bus when computing segmentid: u8 segmentid = pdev-bus ? pcidomainnrpdev-bus : 0; But the next two lines unconditionally dereference...

CVE-2026-80651

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks pdev-bus when computing segmentid: u8 segmentid = pdev-bus ? pcidomainnrpdev-bus : 0; But the next two lines unconditionally dereference...

CVE-2026-80646

CVE-2026-80646 affects the Linux kernel ipv6 subsystem. The vulnerability resides in __in6_dev_stats_get(), where a call to dev_get_by_index_rcu() may return NULL if the original physical device has been unregistered, leading to a NULL pointer dereference and a denial of service. The CVSS 3.1 sco...

EUVD-2026-67512

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use. Revert commit c56716c69ce1 "netfilter:...