2395 matches found
CVE-2026-97967 hwmon: (corsair-cpro) Remove debugfs entries when probe fails
In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...
CVE-2026-97968 hwmon: (corsair-cpro) Create debugfs entries after hwmon registration
In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...
CVE-2026-97915
The Linux kernel contains a vulnerability in the accel/ivpu component where the name field in struct vpu_tracing_buffer_header is populated by the NPU firmware. Because the host side does not enforce NUL-termination on this fixed-size array, using an unbounded string conversion can lead to an out...
CVE-2026-97915 accel/ivpu: Limit firmware log name prints to field size
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...
CVE-2026-97915 accel/ivpu: Limit firmware log name prints to field size
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...
EUVD-2026-86769
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...
CVE-2026-97915: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...
CVE-2026-100079: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until ucsidestroy. Drivers like ucsiglink that unregister/register the same UCSI...
Linux Distros Unpatched Vulnerability : CVE-2026-97967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If...
CVE-2026-97967
In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...
CVE-2026-97967: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...
Linux Distros Unpatched Vulnerability : CVE-2026-97968
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It run...
Linux Distros Unpatched Vulnerability : CVE-2026-100079
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until...
CVE-2026-97968
In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...
CVE-2026-97968: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...
PT-2026-98836
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB Type-C UCSI component where ucsi register creates per-instance debugfs entries, but ucsi unregister fails to remove them until ucsi destroy is called. This lea...
PT-2026-98579
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ivpu component where the name field within the vpu tracing buffer header structure is a fixed-size array populated by the NPU firmware. Because the host side...
PT-2026-98631
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically affecting corsair-cpro. The function ccp debugfs init registers debugfs files using private data from a devm allocated ccp. If the...
PT-2026-98632
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the corsair-cpro hardware monitoring hwmon driver where the ccp debugfs init function registers debugfs files before the hwmon device register with info function is...
Linux Distros Unpatched Vulnerability : CVE-2026-97915
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is...