CVE-2026-90090 Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path btmtksdiotxpacket rounds the transfer size up to the SDIO block size of 256 bytes, but hands the host controller the SKB buffer as is: err = sdiowritesbbdev-func,...

CVE-2026-90090 Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path btmtksdiotxpacket rounds the transfer size up to the SDIO block size of 256 bytes, but hands the host controller the SKB buffer as is: err = sdiowritesbbdev-func,...

CVE-2026-90086 xsk: honor XDP_TX_METADATA in zero-copy path

In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDPTXMETADATA in zero-copy path The zero-copy path reads TX metadata whenever the UMEM has metadata space, even if the descriptor does not set XDPTXMETADATA. Pass descriptor options through the metadata helpers and...

EUVD-2026-81912

In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however it's not currently enforced if NETIFFSG isn't present. In this case, tcpsendmsglocked will try the copy path and try to copy data from an...

CVE-2026-90051 tcp: reject non zerocopy devmem tx

In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however it's not currently enforced if NETIFFSG isn't present. In this case, tcpsendmsglocked will try the copy path and try to copy data from an...

kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

A flaw was found in the Linux kernel's iwlwifi driver, affecting older Intel wireless devices. This vulnerability arises from incorrect handling of transmit TX rates, specifically when the driver attempts to set these rates. An attacker could potentially trigger a firmware assert or crash, leadin...

kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

A flaw was found in the Linux kernel's iwlwifi driver, affecting older Intel wireless devices. This vulnerability arises from incorrect handling of transmit TX rates, specifically when the driver attempts to set these rates. An attacker could potentially trigger a firmware assert or crash, leadin...

CVE-2026-90051: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however it's not currently enforced if NETIFFSG isn't present. In this case, tcpsendmsglocked will try the copy path and try to copy data from an...

PT-2026-94786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi ufs core where connected lane counts are not properly validated. These counts are used by the TX equalization code to index arrays sized by UFS MAX LANES...

CVE-2026-90378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...

PT-2026-94726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the SDIO TX path of the mt792x wifi driver. The issue occurs when the tx prepare skb function returns an error, causing the socket buffer skb to remain unreleased...

PT-2026-94641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IB/isert component where isert put login tx posts full-feature receive buffers before transport register session is executed. This allows an initiator that does no...

CVE-2026-93057: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context TX EQTR may run while devfreq gear scaling has quiesced the UFS tagset. In that context, functions ufshcdtxeqtr, ufshcdtxeqtr and ufsqcomgetrxfom allocate...

PT-2026-94438

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds DMA read exists in the TX path of the Bluetooth btmtksdio driver. The btmtksdio tx packet function rounds the transfer size up to the SDIO block size of 256 bytes while...

CVE-2026-92478: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFSMAXLANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated...

CVE-2026-90090: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path btmtksdiotxpacket rounds the transfer size up to the SDIO block size of 256 bytes, but hands the host controller the SKB buffer as is: err = sdiowritesbbdev-func,...

PT-2026-94697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access exists in the mt7996 tx function within the mt76 wifi driver. When mac80211 leaves the link unspecified, the function uses a primary link id that may be set...

PT-2026-94723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt76 wifi driver where the mt76 tx queue skb function overrides the wireless client identifier wcid passed by the driver. This causes the non aql packets counter t...

PT-2026-94855

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory reclaim deadlock can occur in the TX EQTR context of the UFS core. This happens when TX EQTR runs while devfreq gear scaling has quiesced the UFS tagset. In this state, the...

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced. IBM WebSphere Liberty has been updated within IBM CICS TX Advanced to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM WebSphere...