359 matches found
CVE-2026-81018
A flaw was found in the Linux kernel's think-lmi driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial of service over time due to resource exhaustion...
CVE-2026-89464
A flaw was found in the Linux kernel's twl4030charger driver. When the driver's remove function is called, it fails to properly cancel pending worker tasks. This oversight allows a worker to attempt to access memory that has already been deallocated, leading to a use-after-free vulnerability. A...
CVE-2026-89468
In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...
CVE-2026-81018
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -savesignature, which leak when the driver is removed. Free the signatures...
CVE-2026-81018
CVE-2026-81018 is a memory leak in the Linux kernel 's platform/x86: think-lmi driver. When multi-certificate support is active, the system authentication object stores ->signature and ->save_signature, which are not freed when the driver is removed. The fix frees these signatures on driver...
CVE-2026-81018 platform/x86: think-lmi: Free system certificate signatures
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -savesignature, which leak when the driver is removed. Free the signatures...
EUVD-2026-76341
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -savesignature, which leak when the driver is removed. Free the signatures...
PT-2026-90148
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -save signature, which leak when the driver is removed. Free the signature...
CVE-2026-80871
In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...
CVE-2026-80625
A flaw was found in the Linux kernel's RDMA/hns component. During concurrent driver removal and reset operations, bonding resources are incorrectly released and then re-allocated, leading to a memory leak. This memory leak can potentially cause a kernel panic, resulting in a Denial of Service DoS...
CVE-2026-80653
A flaw was found in the Linux kernel's hisisas driver. A local attacker or privileged user could trigger a kernel warning by simultaneously performing a link reset on a remote physical layer PHY device and removing the SAS driver. This race condition can lead to system instability or a denial of...
CVE-2026-80653
In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...
AZL-98069 CVE-2026-80653 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...
CVE-2026-80625
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...
CVE-2026-80653
In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...
UBUNTU-CVE-2026-80653
In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...
CVE-2026-80653
CVE-2026-80653 is a Linux kernel vulnerability in the hisi_sas SCSI driver for v3 hardware. The root cause is a race condition: during SAS PHY link-up, link->status is set to DL_STATE_AVAILABLE in device_links_driver_bound; when a link reset of a remote PHY and rmmod of the SAS driver occur si...
EUVD-2026-67501
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...
CVE-2026-80625
CVE-2026-80625 affects the Linux kernel in the RDMA/hns driver. In a corner case of concurrent driver removal and driver reset , a bonding resource is first released in hns_roce_hw_v2_exit() and then re-allocated in hns_roce_register_device(), but the release timing has already passed. This cause...
CVE-2026-80625 RDMA/hns: Fix memory leak of bonding resources
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...