CVE-2026-72147

A flaw was found in the dw-edma-pcie component of the Linux kernel's Direct Memory Access DMA engine. This vulnerability occurs because the dwedmapcieprobe function attempts to use PCI device ID driver data as a template without verifying its presence. A local attacker, by binding a device...

CVE-2026-74410

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtwpcirxnapi, newlen is computed as the sum of pktlen 14-bit descriptor field, max 16383 and pktoffset drvinfosz + shift, both firmware-controlled. The...

CVE-2026-74410

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtwpcirxnapi, newlen is computed as the sum of pktlen 14-bit descriptor field, max 16383 and pktoffset drvinfosz + shift, both firmware-controlled. The...

CVE-2026-72147

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

UBUNTU-CVE-2026-72147

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

CVE-2026-74410

The CVE concerns the Linux kernel wireless driver stack for the rtw88 PCI path. A new_len calculation in rtw_pci_rx_napi() can exceed the pre-allocated DMA receive buffer when assembling data from firmware RX descriptors: new_len = pkt_len (14-bit, up to 16383) + pkt_offset (drv_info_sz + shift, ...

CVE-2026-72147 dmaengine: dw-edma-pcie: Reject devices without driver data

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

EUVD-2026-58905

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

PT-2026-72335

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw edma pcie probe treats the PCI device ID driver data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can...

PT-2026-72846

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtw pci rx napi, new len is computed as the sum of pkt len 14-bit descriptor field, max 16383 and pkt offset drv info sz + shift, both...

CVE-2026-68139

A flaw was found in the net/mlx5e driver within the Linux kernel. This vulnerability occurs during PCIe DPC Downstream Port Containment recovery when multiport affiliation events are replayed. A race condition can lead to a NULL pointer dereference if a concurrent master-up event accesses...

Linux Distros Unpatched Vulnerability : CVE-2026-68139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the affected functions and replays multiport affiliation events. In the...

UBUNTU-CVE-2026-68139

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the affected functions and replays multiport affiliation events. In the reported failure, the first relevant device error was: pcieport...

CVE-2026-68372 usb: core: port: Deattach Type-C connector on component unbind

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when the PCIe device is accessible in scalable mode. The commit 4fc82cd907ac “iommu/vt-d: Do not issue ATS invalidation requests when the device is disconnected” relies on pcidevisdisconnected to...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV” This fix reverts to commit 05703271c3cd “PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV”, which caused a deadlock by recursively takin...

CVE-2026-64586

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

CVE-2026-64461

A flaw was found in the Linux kernel's MediaTek PCIe driver. When a Peripheral Component Interconnect Express PCIe port fails to enable, the associated Interrupt Request IRQ domains are not properly released. This resource leak can accumulate over time, potentially leading to a denial of service...

UBUNTU-CVE-2026-64462

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fails, the handler and INTx IRQ domain remain set even though the...

CVE-2026-64461

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtkpcieenableport fails, mtkpcieportfree removes the port from pcie-ports and frees the port structure. However, the IRQ domains set up earlier by...