CLSA-2026-1775779453 Fix of 119 CVEs

CVE-2025-39743 - jfs: truncate good inode pages when hard link is 0 CVE-2025-39743 CVE-2025-39685 - comedi: pcl726: Prevent invalid irq number CVE-2025-39685 CVE-2025-38713 - hfsplus: fix slab-out-of-bounds read in hfsplusuni2asc CVE-2025-38713 CVE-2025-38699 - scsi: bfa: Double-free fix...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: calling inputfreedevice on the allocated iiodev The current implementation of at91tsregister calls inputfreedevice on st-tsinput. However, the err label can be reached before the allocated iiodev is stored to...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-bounds access at91gpioprobe does not check whether a given OF alias is available or if something went wrong during its retrieval. This could lead to issues when accessing the gpiochips array usi...

ROS-20260930-73-0057

The vulnerability in the iio/adc/at91-sama5d2adc.c component of the Linux operating system relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260924-73-0017

The vulnerability of the atmelpinctrlprobe function in the drivers/pinctrl/pinctrl-at91-pio4.c driver for Linux kernel’s PINCTRL output devices is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devmkasprintf devmkasprintf returns a pointer to dynamically allocated memory. The pointer might be NULL if the allocation fails. It is necessary to check the validity of the pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-89738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: at91udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mode board.vbuspin && board.vbuspolled, probe arms a self-restarting cycle...

PT-2026-90454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the at91 udc USB gadget driver when operating in polled-VBUS mode. In this mode, a self-restarting cycle is established where at91 vbus timer schedules vbus timer work...

PT-2026-96488

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91 udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mode board.vbus pin && board.vbus polled, probe arms a self-restarting cycle: at91 vbus timer schedules vbus timer work, and at91 vbus timer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100319 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alia...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100151 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alia...

Linux iio/adc/at91-sama5d2_adc Heap Buffer Overflow DoS

The vulnerability in the iio/adc/at91-sama5d2adc.c component of the Linux operating system relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021604 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call inputfreedevice on allocated iiodev Current implementation of at91tsregister...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013366 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devmkasprintf devmkasprintf returns a pointer to...

ROS-20260306-73-0008

A vulnerability in the at91gpioprobe function of the drivers/pinctrl/pinctrl-at91.c file of the Linux operating system kernel is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

SUSE CVE-2025-71199

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2adc: Fix potential use-after-free in sama5d2adc driver at91adcinterrupt can call at91adctouchdatahandler function to start the work by schedulework&st-touchst.workq. If we remove the module which will call...

CVE-2025-71199

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2adc: Fix potential use-after-free in sama5d2adc driver at91adcinterrupt can call at91adctouchdatahandler function to start the work by schedulework&st-touchst.workq. If we remove the module which will call...

UBUNTU-CVE-2025-71199

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2adc: Fix potential use-after-free in sama5d2adc driver at91adcinterrupt can call at91adctouchdatahandler function to start the work by schedulework&st-touchst.workq. If we remove the module which will call...

EUVD-2025-206798

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2adc: Fix potential use-after-free in sama5d2adc driver at91adcinterrupt can call at91adctouchdatahandler function to start the work by schedulework&st-touchst.workq. If we remove the module which will call...

CVE-2025-71199

The CVE-2025-71199 issue affects the Linux kernel IIO ADC driver for sama5d2 (at91-sama5d2_adc). A use-after-free can occur when at91_adc_interrupt schedules work (via the workqueue) and at91_adc_remove frees the indio_dev later through iio_device_unregister, allowing a worker to access freed mem...