PT-2026-97872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3 component where the arm smmu device remove function manually frees the IOPF queue, destroys the vmid map, and disables the device. Because the IR...

CVE-2026-80766

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device: timerdeletesync&drvdata-inrangetimer; hidhwstophdev; timerdeletesync only guarantees the timer is...

CVE-2026-31440: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the device is reset, causing the configuration registers to go back to their default state, which is zero. As the driver is checking if the event log...

The vulnerability of the `__fsl_mc_deviceremove_if_not_in_mc()` function in the drivers/bus/fsl-mc/dprc-driver.c file of the fslmc kernel driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the fslmcdeviceremoveifnotinmc function in the drivers/bus/fsl-mc/dprc-driver.c file, a driver for the fslmc bus in the Linux operating system, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the ffa_device_remove() function in the drivers/firmware/arm_ffa/bus.c file of the Linux kernel firmware module allows a hacker to cause a service failure.

The vulnerability of the ffadeviceremove function in the drivers/firmware/armffa/bus.c file of the Linux kernel firmware module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-23096

CVE-2026-23096 affects the Linux kernel UACCE accelerator framework (uacce). The issue is in the cleanup path: if cdev_device_add fails, the kernel releases the cdev memory, and later a cdev_device_del could hang. The fix adds a check on the return value of cdev_device_add and clears uacce->cd...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005106 advisory. In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger...

CVE-2023-54117 s390/dcssblk: fix kernel crash with list_add corruption

In the Linux kernel, the following vulnerability has been resolved: s390/dcssblk: fix kernel crash with listadd corruption Commit fb08a1908cb1 "dax: simplify the daxdevice gendisk association" introduced new logic for gendisk association, requiring drivers to explicitly call daxaddhost and...

CVE-2023-54117 s390/dcssblk: fix kernel crash with list_add corruption

In the Linux kernel, the following vulnerability has been resolved: s390/dcssblk: fix kernel crash with listadd corruption Commit fb08a1908cb1 "dax: simplify the daxdevice gendisk association" introduced new logic for gendisk association, requiring drivers to explicitly call daxaddhost and...

CVE-2025-68181

Technical details for CVE-2025-68181 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-53854

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When devm runs function in the "remove" path for a device it runs them in the reverse order. That means that if you have parts of your driver that aren't using devm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988884 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990304 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

EUVD-2025-32753

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix out-of-bounds when setting channels on remove If we set channels greater during iavfremove, and waiting reset done would be timeout, then returned with error but changed numactivequeues directly, that will lead to OOB...

CVE-2025-39893 spi: spi-qpic-snand: unregister ECC engine on probe error and device remove

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remains registered both when the spiregistercontroller function returns with an error and also on device removal. Change...

CVE-2022-49263 brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path

In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if brcmfchipgetraminfo fails. Note that the CLM blob is released in the device remove path...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: leds: Trigger: Unregisters sysfs attributes before calling deactivate. Triggers that have trigger-specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactiva...

SUSE CVE-2024-43830

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactivat...

UBUNTU-CVE-2024-43830

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactivat...

PT-2024-31338

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A memory leak vulnerability has been resolved in the Linux kernel. The issue occurs in the bcm sf2 mdio register function, which calls of phy find device and then phy device remove in a loop to...