USN-8818-6 linux-fips vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

System-Level Optimization beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7

Recent work on embedded post-quantum cryptography has focused primarily on instruction-level optimization, including arithmetic-kernel improvements, assembly tuning, register allocation, and instruction scheduling. Using the Module-Lattice-Based Key-Encapsulation Mechanism ML-KEM on an Arm...

USN-8849-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8849-1 linux-nvidia-tegra-5.15 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

CVE-2026-97914

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When scheduler initialization fails during a job open operation, the driver returns an incorrect positive status code instead of a standard negative error number. A local user can trigger this issue by opening an accelerator j...

CVE-2026-97913

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. This vulnerability can lead to a Denial of Service DoS through device timeouts or potential out-of-bounds memory access. A local user could exploit this issue by submitting a crafted command stream that lacks a required...

CVE-2026-97912

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When the mapping of Static Random-Access Memory SRAM fails during device initialization, the driver fails to reset the memory size to zero. Consequently, a local user can submit processing jobs that access physical address zer...

CVE-2026-97911

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. A local user can submit a job configured with a zero Static Random-Access Memory SRAM size while still performing SRAM operations in the command stream. Because the driver skips setting the region base register when the size i...

USN-8728-3 linux-oracle-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8728-3: Linux kernel (Oracle) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

PT-2026-102757

Name of the Vulnerable Software and Affected Versions Arm TrustZone-M affected versions not specified Description Improper validation of non-secure NS pointers in multiple non-secure callable NSC entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The...

SoK: A Large-Scale Empirical Study of Emulation-Based Dynamic Analysis Research for ARM Cortex-M Firmware (Extended Version)

Microcontroller MCU-based devices are increasingly pervasive, making efficient, scalable firmware security analysis critical. Recent firmware re-hosting work enables automated vulnerability assessment, yet two gaps remain. First, existing tools are evaluated on limited, heavily overlapping...

CVE-2026-98143

A flaw was found in the Linux kernel's Arm Ethos-U neural processing unit NPU accelerator driver. The command stream parser incorrectly interprets hardware rounding mode fields as storage mode parameters on certain device models. A local user can exploit this vulnerability by submitting specific...

OT-PCA: New Key-Recovery Plaintext-Checking Oracle Based Side-Channel Attacks on HQC with Offline Templates

In this paper, we introduce OT-PCA, a novel approach for conducting Plaintext-Checking PC oracle based side-channel attacks, specifically designed for Hamming Quasi-Cyclic HQC. By calling the publicly accessible HQC decoder, we build offline templates that enable efficient extraction of soft...

Linux Distros Unpatched Vulnerability : CVE-2026-93205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and...

ROS-20260925-73-0092

The vulnerability of the switchto function in the arch/arm/kernel/entry-armv.S module of the Linux operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Distros Unpatched Vulnerability : CVE-2026-93229

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memor...

SUSE CVE-2026-93205

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

DEBIAN-CVE-2026-93229

In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memory barrier smprmb before its second counter check. The standard kernel...

DEBIAN-CVE-2026-93205

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...