CVE-2026-80770

CVE-2026-80770 affects the Linux kernel Nintendo HID driver (Joy-Con). In nintendo_hid_probe(), when joycon_init() or joycon_leds_create() fails after hid_device_io_start(), the error path calls hid_hw_close()/hid_hw_stop() without first calling hid_device_io_stop(). Since hid_hw_stop() does not ...

CVE-2026-80770 HID: nintendo: stop device IO before hid_hw_stop on probe failure

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails, the error path jumps to errclose which calls hidhwclose/hidhwstop...

Linux Distros Unpatched Vulnerability : CVE-2026-80770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails,...

PT-2026-91346

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hid hw stop on probe failure nintendo hid probe calls hid device io start before joycon init and joycon leds create. If either fails, the error path jumps to err close which calls hid hw...

PT-2026-85611

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hid hw stop on probe failure nintendo hid probe calls hid device io start before joycon init and joycon leds create. If either fails, the error path jumps to err close which calls hid hw...

AZL-99059 CVE-2026-80728 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devresreleaseall unmaps the aperture before the DRM device release callback fires...

CVE-2026-80728

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devresreleaseall unmaps the aperture before the DRM device release callback fires...

CVE-2026-80728 Revert "drm/amdgpu: fix aperture mapping leak"

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devresreleaseall unmaps the aperture before the DRM device release callback fires...

CVE-2026-80728

This Linux kernel vulnerability affects the DRM/amdgpu driver. The root cause is a devres teardown ordering issue : because devres teardown is LIFO and the aperture devres node was registered after the DRM device node, devres_release_all() unmaps the aperture before the DRM device release callbac...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001429 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aacprobeone calls hardware-specific init function...

SUSE CVE-2026-72073

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300-kref, with vub300delete freeing the mmc host when the last reference is dropped. The probe error path after the...

SUSE CVE-2026-72008

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECTCTL domains, but only after checking if the...

SUSE CVE-2026-80589

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

AZL-97832 CVE-2026-74734 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

UBUNTU-CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-80589

This Linux kernel vulnerability is a slab-use-after-free in the block layer triggered during NVMe device probe failure. When a disk's probe fails before add_disk(), disk_release() calls blk_mq_exit_queue() but fails to stop the q->timeout timer, leaving a dangling entry in the timer wheel afte...

SUSE CVE-2026-72005

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192 – Check runtime resume during probe. The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware. However, it uses pmruntimegetsync without checking the return...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hwengine: Fixed the double-free of the managed BO in the error path. The error path in hwengineinit explicitly frees a BO allocated through xemanagedbocreatepinmap, using xebounpinmapnovm. Since the managed BO already has ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192 – Release reserved memory during cleanup. The MT8192 AFE probe calls ofreservedmemdeviceinit, but it falls back to the preallocated buffers when no reserved memory region is available. However, when the...