CVE-2026-80679

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasdreleasespace checks the implementation of the isese discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND...

ROS-20260827-73-0008

The vulnerability of the dmintegrityinit function in the drivers/md/dm-integrity.c file of the multi-device RAID and LVM driver for the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260827-73-0023

The vulnerability of the spiqupremove function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver relates to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260825-73-0015

The vulnerability of the bchbtreenodealloc function in the drivers/md/bcache/btree.c module of the Linux device driver framework for multiple devices such as RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wg_netns_exit_rtnl() function in the drivers/net/wireguard/device.c file of the network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wgnetnsexitrtnl function in the drivers/net/wireguard/device.c file of the Linux kernel’s network device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the pm_runtime_reinit() function in the drivers/base/power/runtime.c file of the Linux kernel’s device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the __construct_region() function in the drivers/cxl/core/region.c file of the Compute Express Link (CXL) device driver in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the constructregion function in the drivers/cxl/core/region.c file of the Compute Express Link CXL device driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dw_spi_dma_wait() function in the drivers/spi/spi-dw-dma.c file of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the dwspidmawait function in the drivers/spi/spi-dw-dma.c file of the Linux kernel’s SPI device driver is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-72167

A flaw was found in the mtd: rawnand: pl353 component of the Linux kernel. During the probe function, the devmioremap call incorrectly uses the parent device instead of the pl35x device for resource allocation. This oversight prevents the register area from being properly released when the module...

Linux Distros Unpatched Vulnerability : CVE-2026-72332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctxsyncdebugbo amdxdnahwctxsyncdebugbo invoke...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099974 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drmcrtccommit after release The...

The vulnerability of the __req_mod() function in the drivers/block/drbd/drbd_req.c module of the Linux kernel’s block device driver allows a attacker to cause a service failure.

The vulnerability of the reqmod function in the drivers/block/drbd/drbdreq.c file of the Linux kernel’s block device driver involves pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

EUVD-2026-59639

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup in idxdcdevopen The faileddevadd and faileddevname paths drop the file-device reference while wq-wqlock is still held. If putdevicefdev drops the last reference, idxdfiledevrelease...

UBUNTU-CVE-2026-74313

In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduselock across IDR lookup in open path vdusedevopen looks up struct vdusedev through the IDR and then acquires dev-lock only after vduselock has been dropped. This leaves a window where a concurrent VDUSEDESTROYDEV...

UBUNTU-CVE-2026-72167

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe, the devmioremap is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x devi...

CVE-2026-72167

CVE-2026-72167 concerns the Linux kernel: a fix for the mtd: rawnand: pl353 issue where, during probe(), devm_ioremap() used the parent device instead of the current one, preventing the register area from being released on module unload. The remediation is to target the pl35x device in devm_iorem...

CVE-2026-68467 mtd: mchp23k256: use SPI match data for chip caps

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

PT-2026-72448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the MT8192 AFE probe, runtime Power Management PM is enabled temporarily during the reinitialization of the regmap cache from hardware. The process uses the pm runtime get sync functi...