CVE-2026-90214

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC Xilinx formatter Pulse-Code Modulation PCM driver. During the opening of an audio stream, memory allocated for stream data is not properly released if an error occurs in a subsequent step. This can...

Linux kernel IAMS Buffer Overflow DoS

The vulnerability of the amseventtochannel function in the drivers/iio/adc/xilinx-ams.c file of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: Convert gpiolock to a raw spinlock. Functions related to the irqchip may be called in the context of a raw spinlock. Therefore, we must also use a raw spinlock for our own internal locking mechanisms. This fix...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: passing auddrvdata to irq handlers The irq handlers receive a structdevice pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of the probe, after...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the drivers/usb/gadget/udc/udc-xilinx.c file within the Linux kernel, before version 5.16.12, the endpoint index was not validated, and it could be manipulated by the host for out-of-array access...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: clk: xilinx: vcu: Unregistering pllpost only if registered correctly If the registration of pllpost fails, it will be set to NULL or ERR. Unregistering pllpost will also fail, with the following call trace: “Unable to handle kern...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: can: xilinxcan: xcanwriteframe – Fixed the issue of a use-after-free of the transmitted SKB. canputechoskb takes ownership of the SKB, and it may be freed during or after the call. However, xilinxcan xcanwriteframe continues t...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel before version 5.13.3, the drivers/net/ethernet/xilinx/xilinxemaclite.c file made it easier for attackers to bypass the ASLR protection mechanism, as it printed a kernel pointer i.e., the real IOMEM pointer...

SUSE CVE-2026-90214

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: fix streamdata leak on open error In xlnxformatterpcmopen, streamdata is allocated and adata-playstream or adata-capturestream is assigned early. If a later step, such as sndpcmhwconstraintstep or...

SUSE CVE-2026-93157

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

Linux Distros Unpatched Vulnerability : CVE-2026-93157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the firs...

Linux Distros Unpatched Vulnerability : CVE-2026-90214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: xilinx: formatterpcm: fix streamdata leak on open error In xlnxformatterpcmopen, streamdata is allocated and adata-playstream or adata-capturestream is...

DEBIAN-CVE-2026-93157

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

CVE-2026-93157

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

CVE-2026-93157 hwrng: xilinx-trng - propagate timeout before any data is read

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

CVE-2026-93157

CVE-2026-93157 affects the xilinx-trng hardware random number generator driver in the Linux kernel . The root cause is in xtrng_readblock32(), which polls for 16-byte chunks but returns the byte count even when the first poll times out. The caller then treats a zero return as a short successful r...

EUVD-2026-82265

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

CVE-2026-93157 hwrng: xilinx-trng - propagate timeout before any data is read

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

CVE-2026-90214

CVE-2026-90214 affects the Linux kernel ASoC Xilinx formatter_pcm driver. In xlnx_formatter_pcm_open(), stream_data is allocated and the corresponding stream pointer (adata->play_stream or adata->capture_stream) is assigned early. If a subsequent step such as snd_pcm_hw_constraint_step() or...

CVE-2026-93157: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...