CVE-2026-98623 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkmclkustateupdate If listforeachentry exits without hitting a break then "pstate" is not a valid pstate pointer. Introduce a "found" variable instead. The check is reachable fr...

CVE-2026-98623 drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkmclkustateupdate If listforeachentry exits without hitting a break then "pstate" is not a valid pstate pointer. Introduce a "found" variable instead. The check is reachable fr...

CVE-2026-98623

The Linux kernel contains a vulnerability in the drm/nouveau/clk component within the nvkm_clk_ustate_update function. The root cause is a use-after-loop error where the code fails to validate if a pointer is valid after a list_for_each_entry() loop completes without hitting a break. This allows ...

CVE-2026-98666: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serialnumber file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does not wait for a read ...

CVE-2026-98664: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400serialnumberfops is open coded and never calls debugfsfileget, so debugfsremoverecursive does not wait for a read in progress and unbind frees the iiodev underneath it...

CVE-2026-98623: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkmclkustateupdate If listforeachentry exits without hitting a break then "pstate" is not a valid pstate pointer. Introduce a "found" variable instead. The check is reachable fr...

PT-2026-116882

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware revision and firmware date file operations are open coded and never call debugfs file get, which debugfs create file unsafe requires. debugfs remove recursive...

CVE-2026-98703: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrelht: validate fixed rate index The fixedrateidx debugfs file is a plain u32 attribute, so any value can be written to it. minstrelhtupdatestats then copies the value into mi-maxtprate and mi-maxprobrate, an...

PT-2026-116842

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkm clk ustate update If list for each entry exits without hitting a break then "pstate" is not a valid pstate pointer. Introduce a "found" variable instead. The check is...

PT-2026-116738

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu debugfs test ib show amdgpu debugfs test ib show resumes the device with pm runtime get sync before taking the reset domain semaphore with down write killable. If the write lock acquisiti...

PT-2026-116883

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400 serial number fops is open coded and never calls debugfs file get, so debugfs remove recursive does not wait for a read in progress and unbind frees the iio dev...

CVE-2026-98663: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

PT-2026-116922

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrel ht: validate fixed rate index The fixed rate idx debugfs file is a plain u32 attribute, so any value can be written to it. minstrel ht update stats then copies the value into mi-max tp rate and mi-max pro...

PT-2026-116885

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial number file operations are open coded and never call debugfs file get, which debugfs create file unsafe requires. debugfs remove recursive therefore does not wait for...

Linux Distros Unpatched Vulnerability : CVE-2026-98664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: imu: adis16400: fix unprotected debugfs reads adis16400serialnumberfops is open coded and never calls debugfsfileget, so debugfsremoverecursive does not wa...

Linux Distros Unpatched Vulnerability : CVE-2026-98703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: minstrelht: validate fixed rate index The fixedrateidx debugfs file is a plain u32 attribute, so any value can be written to it...

Linux Distros Unpatched Vulnerability : CVE-2026-98663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which...

Linux Distros Unpatched Vulnerability : CVE-2026-98666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: gyro: adis16136: fix unprotected debugfs reads The serialnumber file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.1 contains security vulnerabilities. These vulnerabilities stem from the fixedrateidx field in the debugfs file, which does not validate the fixed rate index written there. This can lead to out-of-bound array indexing and damage to adjacent kernel memory...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from unprotected read operations on the debugfs file system. In this case, the serialnumber file operation does not invoke the debugfsfileget function. As a result, the debugfsremoverecursive function does...