PT-2026-98296

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware contains a hard-coded root account password that is immutable by the user. An attacker with physical access to the device or access to the firmware can recover these...

PT-2026-98283

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware contains an authentication flaw in the root account accessible via the UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol interface. This...

EUVD-2026-81275

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

PT-2026-94684

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial core where the uart register driver function fails to clear pointers when errors occur. Specifically, if tty alloc driver fails, drv-state continues to poin...

CVE-2026-89034

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034 TCH QRing R20_B006 Unauthenticated BLE Access

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034 TCH QRing R20_B006 Unauthenticated BLE Access

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034

TCH QRing smart ring model R20_B006 (firmware RT09R20_1.00.00_250318) contains an unauthenticated Bluetooth Low Energy vulnerability. The exposed Nordic UART Service enforces no client authentication or command authorization, allowing any nearby attacker within BLE range to connect directly, bypa...

PT-2026-94092

Name of the Vulnerable Software and Affected Versions TCH QRing smart ring model R20 B006 version RT09R20 1.00.00 250318 Description The device contains an unauthenticated Bluetooth Low Energy access issue. A nearby attacker can connect to the device without pairing, authentication, or user...

CVE-2026-89034: Missing Authentication for Critical Function

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: serial: protect uartportdtrrts in uartshutdown as well. The commit af224ca2df29 serial: core: Prevent unsafe uart port access, part 3 added several uport == NULL checks. One such check was added to uartshutdown. Therefore, the...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: - tty: serial: Fixed a refcount leak issue in uccuart.c In socinfo, offindnodebytype will return a node pointer with the refcount incremented. We should use ofnodeput when it is no longer needed...

Linux Kernel NFC NCI UART Driver Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of nciua...

Linux Distros Unpatched Vulnerability : CVE-2026-89740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the...

CVE-2026-89740

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

EUVD-2026-76652

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740 serial: imx: serialize imx_uart_ports[] lifetime

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740 serial: imx: serialize imx_uart_ports[] lifetime

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

PT-2026-90456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial imx driver where the imx uart probe function publishes a devm-allocated port in the imx uart ports table before calling uart add one port. Because the entry...