CVE-2026-68188

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session UAF in settermios rfcommttysettermios tests dlc-session without rfcommmutex and later passes the pointer to rfcommsendrpn. The latter dereferences both session-initiator and session-sock. Meanwhile,...

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

Impact For serial-port and media camera / microphone permission checks made from an iframe, the requestingOrigin passed to session.setPermissionCheckHandler was the top-level frame's origin rather than the requesting frame's. Origin-based handler logic could therefore grant a cross-origin iframe...

CVE-2026-70599 Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port and media permission checks made from an iframe passed the top-level frame origin to session.setPermissionCheckHandler instead of...

EUVD-2026-53428

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port and media permission checks made from an iframe passed the top-level frame origin to session.setPermissionCheckHandler instead of...

SUSE CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...

CVE-2026-63876

A flaw was found in the Linux kernel's zs serial driver. During the initialization of the first serial port, a null pointer dereference occurs when a pointer derived from a null parent device pointer is accessed. This vulnerability can lead to a system crash, resulting in a Denial of Service DoS...

Linux Distros Unpatched Vulnerability : CVE-2026-63877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer...

SUSE CVE-2026-53384

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port and then, if the device has a clock, registers a clock notifier. If clknotifierregister fails,...

CVE-2026-63899

CVE-2026-63899 concerns a memory corruption in Linux kernel USB serial mxuport implementation. The vulnerability arises when handling the bulk-out endpoint where the maximum packet size could be smaller than safe, enabling user-controlled slab corruption if a malicious USB device reports a small ...

EUVD-2026-45672

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size...

CVE-2026-63877 serial: dz: Convert to use a platform device

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

EUVD-2026-45762

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

CVE-2026-63877 serial: dz: Convert to use a platform device

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

CVE-2026-63876 serial: zs: Convert to use a platform device

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to mono frame buffer device 160x64 fb0: PMAG-AA frame buffer device at tc0 DECstation Z85C30...

EUVD-2026-45761

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to mono frame buffer device 160x64 fb0: PMAG-AA frame buffer device at tc0 DECstation Z85C30...

CVE-2026-63876

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to mono frame buffer device 160x64 fb0: PMAG-AA frame buffer device at tc0 DECstation Z85C30...

CVE-2026-53384

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port and then, if the device has a clock, registers a clock notifier. If clknotifierregister fails,...

CVE-2026-53384 serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port and then, if the device has a clock, registers a clock notifier. If clknotifierregister fails,...

CVE-2026-53384

The CVE-2026-53384 issue affects the Linux kernel driver for 8250 serial ports (dw8250). During dw8250_probe(), serial8250_register_8250_port() registers the 8250 port and, if a clock exists, attempts to register a clock notifier. If clk_notifier_register() fails, the probe returns an error but d...

CVE-2026-53384

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port and then, if the device has a clock, registers a clock notifier. If clknotifierregister fails,...