PT-2026-94775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where devm krealloc is used to expand the smmu variable into a larger tegra241 cmdqv structure. This process frees the original smmu...

PT-2026-94784

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the kmb ocs aes probe function requests the device IRQ before initializing irq completion. Because the handler can execute immediately upon registration, the ocs aes...

PT-2026-94849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad525x dpot driver where the ad dpot probe function manually creates per-RDAC sysfs files. This implementation requires the probe function to handle the rollback o...

PT-2026-94873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dax/fsdev component where the fsdev dax probe function sets pgmap-ops to &fsdev pagemap ops and pgmap-owner to dev dax without providing a mechanism to clear them...

PT-2026-94913

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the USB subsystem. This occurs when a probe operation runs concurrently with the removal of dynamic IDs. Because dynamic IDs are only guaranteed to b...

PT-2026-94937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the r8a66597 probe function within the USB gadget driver. When the usb add gadget udc function fails, the execution flow jumps to err add udc, which frees t...

PT-2026-94954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sa2ul crypto component where the sa ul probe function calls sa init mem to create a DMA Direct Memory Access pool for security context buffers but fails to check t...

PT-2026-94616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An error handling issue exists in the sd probe function within the SCSI subsystem. When sd large pool create fails after device add&sdkp-disk dev has already succeeded, the system fails ...

PT-2026-94812

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the int3400 thermal driver where the evaluate odvp function creates per-ODVP sysfs files before the thermal zone and other probe resources are registered. Because the...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

AZL-101606 CVE-2026-90041 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

DEBIAN-CVE-2026-90041

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

CVE-2026-90041

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices. inputregisterdevice can fail after the callback returns successfully...

CVE-2026-89933

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

AZL-101129 CVE-2026-89933 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

DEBIAN-CVE-2026-89933

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

AZL-101361 CVE-2026-89888 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10checkhwcfg function calls fwnodehandleputep immediately after allocating and parsing the endpoint. However, it subsequently calls fwnodepropertyreadu32 using the...

AZL-101582 CVE-2026-89883 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rcregisterdevice succeeds, later probe failures must undo the registration with rcunregisterdevice. The current error path jumps to the allocation cleanup label an...

AZL-101501 CVE-2026-89824 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure e.g. probe deferral and on driver unbind also if a devicetree redundantly uses the 'ddc-i2c-bus' property to point ...

DEBIAN-CVE-2026-89824

In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure e.g. probe deferral and on driver unbind also if a devicetree redundantly uses the 'ddc-i2c-bus' property to point ...