CVE-2026-99049

A flaw was found in the Linux kernel's Xilinx General Purpose Input/Output GPIO driver. When a pin request fails, the driver does not properly decrement the runtime power management reference counter. A local user could trigger this failure to cause a resource leak, preventing the hardware...

CVE-2026-98913

A flaw was found in the Linux kernel's Cavium ThunderX network driver. When initializing a network interface, an error occurring after acquiring a reference to the Precision Time Protocol PTP device fails to properly release that reference. A privileged local attacker could exploit this issue by...

CVE-2026-89976

A flaw was found in the Linux kernel's accel/ethosu component. This vulnerability occurs due to improper handling of job completion fences, where an uninitialized fence can be leaked or a zeroed reference count is passed to the dmafenceput function. A local attacker could potentially exploit this...

CVE-2026-89936

A flaw was found in the Linux kernel's iio: dac: m62332 driver. The m62332setvalue function incorrectly manages the reference count for the Vcc regulator. When a channel's value is changed directly from one non-zero value to another, the regulator is enabled multiple times, but only disabled once...

CVE-2026-89935

A flaw was found in the Linux kernel's apds9306 light sensor driver. This issue occurs because certain error paths within the apds9306readdata function fail to properly release a power management reference. This oversight leads to a resource leak, which can prevent the affected device from enteri...

CVE-2026-89830

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. When the system attempts to allocate new data blocks, it may incorrectly increment the count of valid blocks without properly reversing this action if the allocation process fails. This oversight leads to a...

Linux Distros Unpatched Vulnerability : CVE-2026-118262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a...

EUVD-2026-112394

Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a WebSocket client disconnects when the upstream keeps its connection open. The raw proxy waits for both copy directions without reliably...

SUSE CVE-2026-99161

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

AZL-111302 CVE-2026-99161 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

DEBIAN-CVE-2026-99161

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

CVE-2026-99161

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

EUVD-2026-111913

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

CVE-2026-99161

The Linux kernel contains a resource leak in the i2c: viai2c-wmt driver within the wmt_i2c_probe() function. The vulnerability occurs because i2c->clk is acquired using of_clk_get(), but the reference count is not decremented via clk_put() if subsequent operations fail or during module unloadi...

CVE-2026-99161 i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

CVE-2026-99161 i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

kernel: net/handshake: Drain pending requests at net namespace exit

A flaw was found in the Linux kernel's network handshake component. When a network namespace exits, pending handshake requests may not be properly released due to incorrect list handling. This can lead to resource leaks and a list-corruption race, potentially resulting in memory corruption. An...

CVE-2026-99161

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

UBUNTU-CVE-2026-99161

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput, leadi...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It arises when amdgpuhmmrangealloc fails; as a result, amdgpugemuserptrioctl directly returns -ENOMEM and skips cleanup, leaving behind GEM objects, bo-parent references on VM root, and MMU notifier registrations. This may lead to...