CVE-2026-97968

A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro hardware monitoring driver. When device registration fails during initialization, debugfs entries are left registered after the associated device data structure has been freed. A local user with access to the debugfs...

UBUNTU-CVE-2026-100079

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until ucsidestroy. Drivers like ucsiglink that unregister/register the same UCSI...

CVE-2026-98054

A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS sound driver. When an error occurs while opening the driver's debugfs trace interface, the kernel fails to release a previously acquired module reference count. A local user with access to the interface can exploit this issue by...

DEBIAN-CVE-2026-100079

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until ucsidestroy. Drivers like ucsiglink that unregister/register the same UCSI...

CVE-2026-100079 usb: typec: ucsi: unregister debugfs entries on teardown

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until ucsidestroy. Drivers like ucsiglink that unregister/register the same UCSI...

EUVD-2026-87059

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until ucsidestroy. Drivers like ucsiglink that unregister/register the same UCSI...

CVE-2026-100079

The Linux kernel contains a vulnerability in the usb: typec: ucsi component where ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() fails to remove them until ucsi_destroy() is called. This issue can cause drivers, such as ucsi_glink , to encounter errors and log message...

DEBIAN-CVE-2026-97967

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...

DEBIAN-CVE-2026-97968

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...

AZL-104256 CVE-2026-97915 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...

DEBIAN-CVE-2026-97915

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...

CVE-2026-97968

A vulnerability exists in the Linux kernel within the hwmon (corsair-cpro) driver. The ccp_debugfs_init() function incorrectly registers debugfs files before the hwmon_device_register_with_info() call. If registration fails, the HID core frees the allocated ccp data, but the debugfs entries remai...

CVE-2026-97968 hwmon: (corsair-cpro) Create debugfs entries after hwmon registration

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...

CVE-2026-97967 hwmon: (corsair-cpro) Remove debugfs entries when probe fails

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...

EUVD-2026-86822

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...

CVE-2026-97967

The Linux kernel contains a vulnerability in the hwmon (corsair-cpro) driver. When hwmon_device_register_with_info() fails immediately after ccp_debugfs_init() registers files, the ccp_probe() function returns without removing those debugfs entries. Because the HID core then frees the ccp structu...

CVE-2026-97968

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...

EUVD-2026-86821

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...

CVE-2026-97967

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...

CVE-2026-97915 accel/ivpu: Limit firmware log name prints to field size

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...