CVE-2026-53382

A flaw was found in the Linux kernel's vidtv media driver. This vulnerability occurs because the vidtvmuxpushsi function does not properly handle a NULL return value from vidtvmuxgetpidctx, which can happen if a PID context fails to allocate during initialization. An attacker could potentially...

CVE-2026-53379

A flaw was found in the Linux kernel's ov8856 media driver. This vulnerability occurs due to improper error handling where a control handler is not correctly released if an error occurs during its initialization. This oversight could potentially lead to resource exhaustion, which may result in a...

CVE-2026-53374

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-64107

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC pcm512x chipset driver. This vulnerability occurs due to incorrect handling of kcontrol definitions, leading to a null-pointer dereference. A local attacker could potentially trigger this flaw, causi...

CVE-2026-64166

A flaw was found in the Linux kernel's ARM FF-A Firmware Framework for Arm firmware. This vulnerability occurs during driver registration, where the bus match callback assumes that every FF-A driver provides an ID table and dereferences it unconditionally. A buggy client driver could exploit this...

CVE-2026-64083

A flaw was found in the Linux kernel's pmbus/adm1266 driver within the hwmon subsystem. The adm1266gpioget and adm1266gpiogetmultiple functions fail to validate the length of responses from I2C block-read operations. A local user or a malicious I2C Inter-Integrated Circuit slave device can exploi...

CVE-2026-64154

A flaw was found in the Linux kernel's Adreno graphics processing unit GPU driver. This vulnerability occurs in the a6xxgpuinit function, where a device node reference is not properly released under certain error conditions. This oversight can lead to a gradual accumulation of unreleased resource...

CVE-2026-64161

A flaw was found in the Linux kernel's icssm-prueth driver. This vulnerability occurs in the icssmpruethprobe function. When an error occurs during the ofpropertyreadu32 operation, a previously acquired ethportsnode is not properly released. This oversight leads to a memory leak, which can impact...

CVE-2026-64055

A flaw was found in the Linux kernel's Cortina ethernet driver. When the network interface processes incoming packets, a counter used for reassembling fragmented packets can be prematurely reset. This can lead to incomplete packet reassembly, potentially causing network communication issues or...

CVE-2026-64169

A flaw was found in the Linux kernel's spi: ep93xx driver. This vulnerability occurs when the driver fails to properly clear Direct Memory Access DMA channel pointers after a DMA setup failure during probe. An attacker could potentially trigger a system crash, leading to a Denial of Service DoS...

CVE-2026-64056

A flaw was found in the Linux kernel's Cortina ethernet driver for Gemini devices. The driver used a single, shared buffer SKB, or Socket Kernel Buffer for assembling incoming network packets across multiple ethernet ports. This shared resource could lead to race conditions, where simultaneous...

CVE-2026-64205

A flaw was found in the Linux kernel's i2c-i801 driver. This vulnerability allows a local attacker to trigger a hardware state machine corruption during error handling. This can lead to a denial of service DoS, where the system becomes unresponsive due to a continuous stream of error messages and...

The vulnerability of the mlx5_irq_alloc() function in the drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

PT-2026-62126

The DesignWare SPI driver drivers/spi/spi dw.c computed the SPI BAUDR clock divider as info-clock frequency / config-frequency without validating config-frequency. spi transceive is a Zephyr syscall and its verify handler drivers/spi/spi handlers.c copies the caller-supplied spi config from...

kernel security, bug fix, and enhancement update

4.18.0-553.146.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

PT-2026-62122

The NXP LPUART serial driver drivers/serial/uart mcux lpuart.c, when CONFIG UART USE RUNTIME CONFIGURE is enabled, called LPUART Deinit at the start of mcux lpuart configure, which disables the LPUART peripheral clocks. The requested configuration is validated only afterwards in mcux lpuart...

ALSA-2026:42919 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in tpm2loadcmd CVE-2025-71147 kernel:...

The vulnerability of the `nvme_dbbuf_set()` function in the driver/nvme/host/pci.c module of the Linux NVME driver allows a attacker to escalate their privileges or execute arbitrary code.

The vulnerability of the nvmedbbufset function in the drivers/nvme/host/pci.c file of the NVME kernel driver in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

CVE-2026-63842

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability arises from the driver's inability to properly handle 64-bit user fence writes to its JPEG rings. A local user could exploit this by submitting specially crafted commands, potentially leading to system instability or a...

CVE-2026-63837

A flaw was found in the Linux kernel's Elastic Network Adapter ENA driver. The driver's Precision Time Protocol PTP Hardware Clock PHC support, specifically the enaphcgettimex64 function, fails to check the return code of an internal timestamp retrieval function. This oversight can lead to...