CVE-2026-31741

CVE-2026-31741 affects the Linux kernel rz-mtu3-cnt counter module. Repeated writes to the sysfs enable file can underflow/overflow the Runtime PM usage count, causing clocked-off hardware register accesses and potential instability/DoS. The issue is resolved in upstream kernel (v6.6.137) and dis...

EUVD-2026-26524

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi-nrpages in f2fswriteendio The xfstests case "generic/107" and syzbot have both reported a NULL pointer dereference. The concurrent scenario that triggers the panic is as follows:...

CVE-2026-31715 f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi-nrpages in f2fswriteendio The xfstests case "generic/107" and syzbot have both reported a NULL pointer dereference. The concurrent scenario that triggers the panic is as follows:...

Cisco Adaptive Security Appliance (ASA) Software ESP Packet Processing DoS (cisco-sa-asaftd-esp-dos-uv7yD8P5)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secur...

PT-2026-36375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the counter and PWM sub-drivers when assigning a struct device pointer to the dev member of the shared struct rz mtu3 channel. Because both drivers can us...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the PM counter being incorrectly checked for cache values during multiple writes to the sysfs...

PT-2026-36376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rz-mtu3-cnt counter where the Runtime PM Power Management counter is incremented or decremented every time the sysfs enable file is written to. Writing 0 to this...

PT-2026-36404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpib driver's IO ioctl handlers. The 'IBRD', 'IBWRT', 'IBCMD', and 'IBWAIT' ioctl handlers utilize a gpib descriptor pointer after the board-big gpib...

Cisco Firepower Threat Defense (FTD) Software ESP Packet Processing DoS (cisco-sa-asaftd-esp-dos-uv7yD8P5)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the processing of Galois/Counter Mode GCM-encrypted Internet Key Exchange version 2 IKEv2 IPsec traffic of Cisco Secure Firewall Adaptive Security Applian...

The vulnerability of the perf_pending_task_sync() function in the kernel/events/core.c module, which manages kernel-level events in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the perfpendingtasksync function in the kernel/events/core.c module, which handles kernel events in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.

The vulnerability of the ofgetdrtimings function in the drivers/memory/ofmemory.c module of the Linux kernel’s memory driver library is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the cxl_calc_capp_routing() function in the drivers/misc/cxl/pci.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cxlcalccapprouting function in the drivers/misc/cxl/pci.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ti_sci_intr_irq_domain_probe() function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux operating system’s IRQ chip driver module allows a attacker to cause a service failure.

The vulnerability of the tisciintrirqdomainprobe function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the raid_component_add() function in the drivers/scsi/raid_class.c module of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.

The vulnerability of the raidcomponentadd function in the drivers/scsi/raidclass.c module of the Linux SCSI device driver is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hswep_has_limit_sbox() function in the arch/x86/events/intel/uncore_snbep.c module, which is part of the Linux kernel support for x86 processors, allows a hacker to trigger a service failure.

The vulnerability of the hswephaslimitsbox function in the arch/x86/events/intel/uncoresnbep.c module of the Linux kernel’s x86 platform is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the function mt8183_mt6358_ts3a227_max98357_dev_probe() in the sound module/soc/mediatek/mt8183/mt8183-mt6358-ts3a227-max98357.c code, which supports Linux operating system SoC cores for audio support. This vulnerability allows a hacker to cause a service failure.

The vulnerability of the mt8183mt6358ts3a227max98357devprobe function in the sound/soc/mediatek/mt8183/mt8183-mt6358-ts3a227-max98357.c sound-related module of the Linux operating system’s SoC kernel is associated with errors during link counter updates. Exploiting this vulnerability can allow an...

Tor: Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After Teardown

A vulnerability was discovered in Tor's Conflux OOO queue accounting. The vulnerability could cause the global OOO queue byte counter to remain inflated after a Conflux set was torn down, even though the memory had already been freed. This was due to a lack of accounting updates during the teardo...

CLSA-2026-1777305243 Fix CVE(s): CVE-2024-38286

SECURITY UPDATE: Denial of Service caused by unbounded TLS handshake wrap queue in SecureNio2Channel / SecureNioChannel. Backport upstream fix from 9.0.x commit 76c5cce6f0bcef14b0c21c38910371ca7d322d13. - debian/patches/CVE-2024-38286.patch: cap the handshake wrap queue at...

The vulnerability of the `of_lpddr3_get_ddr_timings()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the oflpddr3getdrtimings function in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4_unlink() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ext4unlink function in the Linux operating system’s kernel is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...