CVE-2026-23790

CVE-2026-23790 affects the DPU (Display Processing Unit) driver in Samsung Exynos mobile processors (1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, 2600). The root cause is a double-free resulting from improper pointer management during DMA buffer reallocation , which can lead to kernel memory c...

CVE-2026-23790

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver due to improper pointer management during DMA buffer reallocation leads to kernel memory corruption and a...

kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...

VFIO Heap Buffer Overflow DoS

The vulnerability of the vfiopcicorefeaturedmabuf function in the driver/vfio/pci/vfiopcidmabuf.c file of the VFIO device drivers in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

SUSE CVE-2026-80633

In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dmaresv lock before dmabufunpin in release path dmabufunpin requires the caller to hold the exporter's dmaresv lock: void dmabufunpinstruct dmabufattachment attach ... dmaresvasserthelddmabuf-resv;...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

amdgpu_dma_buf_move_notify Heap Buffer Overflow DoS

The vulnerability of the amdgpudmabufmovenotify function in the drivers/gpu/drm/amd/amdgpu/amdgpudmabuf.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory...

SUSE CVE-2026-74410

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtwpcirxnapi, newlen is computed as the sum of pktlen 14-bit descriptor field, max 16383 and pktoffset drvinfosz + shift, both firmware-controlled. The...

Linux kernel DMA Buffer Overflow DoS

The vulnerability of the readdmabuffer function in the drivers/hid/intel-thc-hid/intel-thc/intel-thc-dma.c file of the Linux kernel subsystem for controlling peripheral devices is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

VFIO Heap Buffer Overflow DoS

The vulnerability of the vfiopcicorefeaturedmabuf function in the driver/vfio/pci/vfiopcidmabuf.c file of the VFIO device drivers in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-74655

A flaw was found in the Linux kernel. Specifically, a vulnerability exists in the qcom-geni Universal Asynchronous Receiver-Transmitter UART driver's transmit Direct Memory Access DMA buffer flush mechanism. A local user can exploit this by initiating a large write operation immediately followed ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-aligned output buffer Sashiko reports that when sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg, which directly maps this buffer for DMA operations. When the DMA...

UBUNTU-CVE-2026-74655

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

CVE-2026-74655 serial: qcom-geni: fix TX DMA buffer flush

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

CVE-2026-74410

A flaw was found in the Linux kernel's rtw88 wifi driver. An attacker able to control firmware RX descriptors could cause an out-of-bounds read from the pre-allocated Direct Memory Access DMA buffer. This occurs because the newlen calculation in the rtwpcirxnapi function does not properly validat...

CVE-2026-74328

A flaw was found in the Linux kernel's iommufd component. This vulnerability occurs because the system attempts to destroy page content before a direct memory access buffer dmabuf is fully detached, while a mutex a mechanism to prevent simultaneous access to shared resources might still be in use...

CVE-2026-74279

A flaw was found in the Linux kernel's cavium/cpt cryptographic driver. An incorrect loop index in the sgcleanup error path during Direct Memory Access DMA buffer unmapping could lead to resource exhaustion. This issue results in successfully mapped entries being leaked and failed entries being...

CVE-2026-74495

A flaw was found in the igbvf driver of the Linux kernel. An off-by-one error during the cleanup of transmit TX Direct Memory Access DMA buffer mappings can lead to a memory leak. If an error occurs while mapping TX buffers, one DMA mapping may not be properly unmapped, potentially impacting syst...

Linux Distros Unpatched Vulnerability : CVE-2026-74280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sgcleanup path used...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101973 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds ea...