CVE-2026-97513

A flaw was found in the Linux kernel's Chips Wave5 video driver. A local user could trigger a Denial of Service DoS by causing a race condition during device release. When closing a video stream, the driver releases internal memory structures before removing the instance from the active list,...

PT-2026-97970

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix device register error path When device register fails in i3c master register new i3c devs, put device is called to drop the reference taken by device register. That drops the last reference, so the device's relea...

CVE-2026-93136

CVE-2026-93136 affects the Linux kernel's MHI (Modem Host Interface) bus endpoint driver (bus: mhi: ep). The vulnerability is a device reference count leak in the error path of MHI device creation. When dev_set_name() or device_add() fails during device creation, the error path incorrectly drops ...

CVE-2026-90215

CVE-2026-90215 is a reference-count leak in the Linux kernel's MTD UBI (Unsorted Block Images) subsystem. The function ubi_detach_mtd_dev() obtains a device reference via ubi_get_device() before checking whether the UBI device is busy; on the busy return path it drops ubi->ref_count but leaves...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: misc: fastrpc: Do not remove the map from createprocess and devicerelease functions. Do not remove the map from the list during the error handling in fastrpcinitcreateprocess. Instead, call fastrpcmapput to avoid a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: mdp3: Fixed resource leaks in offinddevicebynode. Use putdevice to release the object obtained through offinddevicebynode, thereby avoiding resource leaks...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fixed a race condition between the release of rpmsgctrldev and cdev The struct rpmsgctrldev contains a struct cdev. The current code releases the rpmsgctrldev struct in rpmsgctrldevreleasedevice, but the cdev is a...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mdio: Fixed an unbalanced fwnode reference count in mdiodevicerelease. There is a warning report regarding a refcount leak when probing the mdio device: OF: Error: Memory leak; the expected refcount was 1 instead of 2. The...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mdiobus: fix unbalanced node reference count I encountered the following issue during the devicemscc-miim load test, with CONFIGOFUNITTEST and CONFIGOFDYNAMIC enabled: - ERROR: Memory leak; the expected reference count was 2...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mISDN: a possible memory leak in mISDNdspelementregister has been fixed. After committing 1fa5ae857bb1 "driver core: get rid of struct device’s busid string array", the name of the device is allocated dynamically. Use putdevic...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Fixed a slab-use-after-free in scmibusnotifier. The scmidev-name is released prematurely in scmidevicedestroy, which causes a slab-use-after-free when accessing scmidev-name in scmibusnotifier. Therefore, the...

EUVD-2026-66468

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-80553

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

PT-2026-82169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the io work and crw work workqueues were not properly un-initialized. This could allow work to be dispatched after the private...

CVE-2026-74706 bnge: Fix NULL pointer dereference in aux device release

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceuninit, which eventually invokes bngeauxdevrelease. The release callback...

CVE-2026-74706

CVE-2026-74706 is a NULL pointer dereference in the Linux kernel's bnge (Broadcom NetXtreme-E) network driver. When allocation of auxr_dev fails during auxiliary device setup, the error path invokes bnge_aux_dev_release(), which unconditionally dereferences aux_priv->auxr_dev->pdev. Since a...

PT-2026-72672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the video registration process within the staging area. The function comp register videodev allocates a video device using video device alloc and attempts t...

UBUNTU-CVE-2026-68416

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

CVE-2026-68416 mtd: fix double free and WARN_ON in add_mtd_device() error paths

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...