19 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-80737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after ...
CVE-2026-80737
In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port...
CVE-2026-80737 serial: amba-pl011: synchronize DMA teardown
In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port...
CVE-2026-80737 serial: amba-pl011: synchronize DMA teardown
In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port...
CVE-2026-80737
This vulnerability affects the amba-pl011 UART driver in the Linux kernel . During DMA teardown, dmaengine_terminate_all() does not wait for a running callback, allowing the TX callback to access the TX buffer after it has been freed (use-after-free). Additionally, the RX poll timer reads RX buff...
EUVD-2026-70341
In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port...
CVE-2026-74691
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
CVE-2026-74691
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
UBUNTU-CVE-2026-74691
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
CVE-2026-74691
CVE-2026-74691 is a teardown ordering bug in the Linux kernel Thunderbolt network driver (net: thunderbolt / tbnet). The driver stops its DMA rings and frees frame buffers before deactivating the high-speed DMA paths, but the setup path was previously fixed to enable paths last. Teardown was neve...
CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
EUVD-2026-64378
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
Linux Distros Unpatched Vulnerability : CVE-2026-74691
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling...
PT-2026-79696
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet tear down stops both rings and frees their frame buffers before calling tb xdomain disable paths. tb ring stop zeroes the ring's descriptor base and tbnet free...
UBUNTU-CVE-2026-74415
In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...
CVE-2026-74415 spi: atcspi200: fix use-after-free when driver unbind
In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...
CVE-2026-74415
CVE-2026-74415 concerns the Linux kernel SPI driver for atcspi200. The root cause is a use-after-free during driver unbind when DMA resources are initialized after SPI controller registration, causing DMA teardown while the controller is still active and may trigger DMA transfers. The vulnerabili...
EUVD-2026-24849
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. The SPI controller is registered using devmspiregistercontroller, which delays unregistration of the SPI controller until after the...