PT-2026-91786

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx gen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rx lock" which addresses following sashiko-bot findings:...

PT-2026-91325

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrange timer on remove uclogic remove cancels the pen in-range timer and then stops the device: timer delete sync&drvdata-inrange timer; hid hw stophdev; timer delete sync only guarantees the...

CVE-2026-80766: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device: timerdeletesync&drvdata-inrangetimer; hidhwstophdev; timerdeletesync only guarantees the timer is...

CVE-2026-80889: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

Linux kernel timer_migration Heap Buffer Overflow DoS

The vulnerability of the tmigrhandleremotecpu function in the kernel/time/timermigration.c module of the Linux kernel’s timer subsystem is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a...

PT-2026-85607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID uclogic component. The uclogic remove function uses timer delete sync to cancel the pen in-range timer before calling hid hw stop. However, uclog...

Linux Distros Unpatched Vulnerability : CVE-2026-80766

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device:...

SUSE CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

UBUNTU-CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

UBUNTU-CVE-2026-80737

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port...

CVE-2026-80727

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

CVE-2026-80737

This vulnerability affects the amba-pl011 UART driver in the Linux kernel . During DMA teardown, dmaengine_terminate_all() does not wait for a running callback, allowing the TX callback to access the TX buffer after it has been freed (use-after-free). Additionally, the RX poll timer reads RX buff...

CVE-2026-80727 x86/mce: Set up the polling timer before CMCI discovery

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

EUVD-2026-70331

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

CVE-2026-80727

CVE-2026-80727 affects the Linux kernel x86 MCE (Machine Check Exception) subsystem. During boot, the CMCI storm detection path (cmci_discover → mce_timer_kick → __mod_timer) attempts to modify a timer that has not yet been initialized via timer_setup(), triggering ODEBUG assertions (assert_init ...

CVE-2026-80727 x86/mce: Set up the polling timer before CMCI discovery

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

CVE-2026-80737: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port...

CVE-2026-80727: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...

PT-2026-84925

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc5 Description An issue exists in the x86 Machine Check Exception MCE implementation where the CMCI storm detection attempts to modify a polling timer before it has been properly initialized. This sequence...