Linux Distros Unpatched Vulnerability : CVE-2026-92504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: intel: int3400: clean up ODVP on probe failures evaluateodvp creates per-ODVP sysfs files before the thermal zone and later probe resources are...

ROS-20260918-73-0042

The vulnerability of the ip6flseqshow function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-93069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OPP: Fix cleanup ordering Commit 173e02d67494 OPP: Initialize scope-based pointers inline added initialization for all pointers. In some cases, the ordering was...

Linux Distros Unpatched Vulnerability : CVE-2026-93090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been...

Linux Distros Unpatched Vulnerability : CVE-2026-90403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtlwifi: pci: fix error path in rtlpciprobe In the last error path in rtlpciprobe, the cleanup functions are skipped due to a wrong goto label. Moreover,...

FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup

A null pointer dereference flaw in FreeRDP allows a remote attacker to cause a denial of service DoS via specially crafted smartcard requests. If reader-state decoding fails, the system attempts to free uninitialized states during cleanup, resulting in a process crash...

AZL-102260 CVE-2026-93090 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...

CVE-2026-93069

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

DEBIAN-CVE-2026-92504

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int3400: clean up ODVP on probe failures evaluateodvp creates per-ODVP sysfs files before the thermal zone and later probe resources are registered. The current unwind path only calls cleanupodvp from the late sys...

DEBIAN-CVE-2026-90402

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhiregistercontroller adds the controller device before creating the optional triggeredl sysfs file. If sysfscreatefile fails, the error path only drops the device...

CVE-2026-90147

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

DEBIAN-CVE-2026-90147

In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devmclkgetoptionalenabledwithrate devmclkgetoptionalenabledwithrate registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock...

CVE-2026-93090

CVE-2026-93090 affects the ARM SCMI (System Control and Management Interface) firmware driver in the Linux kernel . The root cause is a failure-handling defect in scmi_channels_setup(): if this function fails after the common BASE channel or earlier protocol channels have already been registered ...

CVE-2026-93069 OPP: Fix cleanup ordering

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

EUVD-2026-82179

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

CVE-2026-93069 OPP: Fix cleanup ordering

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

CVE-2026-92488 RDMA/erdma: complete object teardown when the destroy command fails

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: complete object teardown when the destroy command fails erdmadestroyqp, erdmadestroycq, erdmaderegmr, and erdmadestroyah returned early when erdmapostcmdwait failed, leaking the queue buffers, MTTs, doorbells and the...

CVE-2026-90403

CVE-2026-90403 affects the Linux kernel's rtlwifi PCI driver . In the last error path of rtl_pci_probe(), a wrong goto label causes cleanup functions to be skipped, leaving previously successful calls to rtl_init_rfkill(), ieee80211_register_hw(), and rtl_debug_add_one() unreverted. The fix updat...

EUVD-2026-82064

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtlpciprobe In the last error path in rtlpciprobe, the cleanup functions are skipped due to a wrong goto label. Moreover, the successful call to rtlinitrfkill, ieee80211registerhw,...

CVE-2026-90402 bus: mhi: host: Fix controller cleanup on EDL sysfs failure

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhiregistercontroller adds the controller device before creating the optional triggeredl sysfs file. If sysfscreatefile fails, the error path only drops the device...