AZL-106260 CVE-2026-98266 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

DEBIAN-CVE-2026-98266

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98266

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

AZL-106170 CVE-2026-98195 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: fix broadcast stations deallocation On the error path of il4965up, ildeallocbcaststations clears only ILSTAUCODEACTIVE, leaving ILSTABCAST set. This causes the same broadcast stations to be deallocated again by...

CVE-2026-98266

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98319

In the Linux kernel, the following vulnerability has been resolved: drm: Fix drmpendingvblankevent leak in error path for outfenceptr When an outfenceptr is provided but DRMMODEPAGEFLIPEVENT is not set, a drmpendingvblankevent will be allocated. If later, there is an allocation failure or another...

UBUNTU-CVE-2026-98266

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

EUVD-2026-93311

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211joinmesh acquires a channel context and then calls ieee80211startmesh, which can fail. In that case, the chanctx isn't released then interface removal will attempt...

CVE-2026-98275

The Linux kernel contains a vulnerability in the cortina ethernet driver regarding how it handles the RX overrun interrupt . The gmac_irq() function incorrectly acknowledges the interrupt using the RX descriptor error bit from status register 0, instead of the bit reported in status register 4. F...

CVE-2026-98266 ALSA: core: Fix potential UAF after asynchronous card release

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...

CVE-2026-98266

The Linux kernel contains a use-after-free vulnerability in the ALSA core component. The issue occurs when a sound card is released asynchronously via snd_card_free_when_closed(), such as in USB-audio drivers . While snd_card_disconnect() gates new accesses, in-flight tasks may still access the u...

CVE-2026-25272

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

CVE-2026-25273

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...

CVE-2026-25270

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...

CVE-2026-25273 Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...

CVE-2026-25273 Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...

CVE-2026-25273

The Camera Driver is vulnerable to Memory Corruption caused by an out-of-bounds write during driver updates when processing camera operations. This issue is categorized under CWE-787 . The CVSS 3.1 score is 6.7 (MEDIUM) , with a local attack vector and high privileges required. Exploitation detai...

EUVD-2026-92974

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

CVE-2026-25272 Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

CVE-2026-25272 Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...