PT-2026-93516

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the media TI VPE component where the vip stop streaming function fails to synchronize the hardirq handler or disable recovery work. This can lead to a use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2026-89875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is...

CVE-2026-89875: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

VulnCheck KEV: CVE-2022-0412

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint, allowing unauthenticated attackers to perform SQL...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc – fixed an off-by-one error in the wireorder validation. The current validation wireorderi ARRAYSIZEconfig pins allows wireorderi to equal ARRAYSIZEconfig pins, which causes out-of-bounds access when used as an...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626 – Use DMA-safe memory for spiread. Add a DMA-safe buffer and use it for spiread, instead of using a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we simply use a u8 arra...

Astra Linux – Vulnerability in Qemu

A use-after-free vulnerability was discovered in the am53c974 SCSI host bus adapter emulation in QEMU in versions prior to 6.0.0, during the handling of the ‘Information Transfer’ command CMDTI. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fixed information leakage in triggered buffers. The “buffer” local array is used to push data to user space from a triggered buffer. However, values for inactive channels are not set, as the function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: ti: am65-cpsw: Fix for freeing the IRQ in am65cpswnussremove Txchns. When obtaining the IRQ, we use k3udmagluetxgetirq, which returns a negative error value if there is an error. Therefore, checking if the IRQ is...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: ti: k3-udma-glue: fix memory leak when registerdevice fails. If deviceregister fails, it should call putdevice to release the reference. The name allocated by devsetname can be freed in the callback function...

The vulnerability of the ads1298_get_scale() function in the drivers/iio/adc/ti-ads1298.c driver for various types of built-in sensor sensors in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ads1298getscale function in the drivers/iio/adc/ti-ads1298.c driver for various types of embedded sensors in Linux operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

SUSE CVE-2026-72060

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: icssg: guard PA stat lookups icssgndogetstats64 unconditionally calls emacgetstatbyname with FW PA stat names regardless of whether the PA stats block is present on the hardware. emacgetstatbyname already guard...

AZL-97797 CVE-2026-74737 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

Linux Distros Unpatched Vulnerability : CVE-2026-74737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is...

The vulnerability of the wl1271_op_resume() function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

The vulnerability of the emac_rx_packet() function in the drivers/net/ethernet/ti/icssg/icssg_common.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the emacrxpacket function in the drivers/net/ethernet/ti/icssg/icssgcommon.c file of the Ethernet network adapter driver in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to cause a service...

The vulnerabilities of the functions emac_rx_packet_zc() and emac_rx_packet() in the drivers/net/ethernet/ti/icssg/icssg_common.c file of the ethernet driver for Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions emacrxpacketzc and emacrxPacket in the driver module drivers/net/ethernet/ti/icssg/icssgcommon.c of the Ethernet network adapter driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fixed a NULL pointer dereference in calctxv4l2initformats. In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt, and there is a dereference of it afterward. This could lead to a NULL pointer...