The vulnerability of the verity_fec_decode() function in the drivers/md/dm-verity-fec.c file of the device driver for multiple Linux device types (RAID and LVM), allowing a hacker to cause a service failure.

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-45195

CVE-2026-45195 affects kernel software inside a Host VM that posts commands to GPU Firmware, enabling memory reads/writes outside the host kernel’s permitted range. Root cause: untrusted addresses passed to rgxfw_set_mips_fault_address in the GPU DDK may grant the firmware privileged memory acces...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-8412-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8412-1 advisory. Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU incorrectly...

CVE-2026-45956

The CVE-2026-45956 entry concerns the Linux kernel DRM Exynos driver (vidi) where vidi_connection_ioctl() incorrectly reads driver_data from drm_dev->dev, which points to the exynos-drm master device rather than the vidi component device. This mismatch can trigger null pointer dereferences, ga...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: idpf: Error handling in the inittask during loading was fixed. If the inittask fails during driver loading, we end up with no vports and netdevs, effectively failing the entire process. In that state, a subsequent reset will resu...

CVE-2026-43430

A flaw was found in the Linux kernel's yurex USB driver. A race condition occurs during the device probing process, where internal descriptor data can be overwritten before proper initialization. This vulnerability could lead to data corruption or unexpected system behavior, impacting the stabili...

CVE-2026-43426 usb: renesas_usbhs: fix use-after-free in ISR during device removal

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: fix use-after-free in ISR during device removal In usbhsremove, the driver frees resources including the pipe array while the interrupt handler usbhsinterrupt is still registered. If an interrupt fires after...

CVE-2026-43372 net: dsa: microchip: Fix error path in PTP IRQ setup

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Fix error path in PTP IRQ setup If requestthreadedirq fails during the PTP message IRQ setup, the newly created IRQ mapping is never disposed. Indeed, the kszptpirqsetup's error path only frees the mappings...

USN-8258-1: Linux kernel (Azure) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

CVE-2026-43082

CVE-2026-43082 affects the Linux kernel net: txgbe component. The issue arises from how property_entry lists are terminated: the driver allocated exactly the number of entries used and did not reserve space for the terminating empty entry. The fix updates the struct definition of property_entry t...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the TMU device driver managing power state and clocking within the context of original spinlocks,...

The vulnerability of the md_bitmap_resize() function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mdbitmapresize function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

EUVD-2026-24849

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. The SPI controller is registered using devmspiregistercontroller, which delays unregistration of the SPI controller until after the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013665 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix memory leak in vfioap device driver The device release callback function invoke...

USN-8184-1: Linux kernel (Real-time) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

Linux Distros Unpatched Vulnerability : CVE-2026-23446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: aqc111: Do not perform PM inside suspend callback syzbot reports task hung in rpmresume This is caused by aqc111suspend calling the PM variant of its...

The vulnerability of the try_smi_init() function in the drivers/char/ipmi/ipmi_si_intf.c driver for Linux’s alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the trysmiinit function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pcie_bwnotif_probe() function in the drivers/pci/pcie/bwctrl.c module of the Linux operating system’s device support driver allows a hacker to trigger a service failure.

The vulnerability of the pciebwnotifprobe function in the drivers/pci/pcie/bwctrl.c file of the Linux operating system’s device support driver module is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_iov_scan_device() function in the drivers/pci/iov.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.

The vulnerability of the pciiovscandevice function in the drivers/pci/iov.c module of the Linux operating system’s device support driver relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of...