CVE-2026-19576: Out-of-bounds Write

The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...

USN-8911-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...

USN-8887-3: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

ROS-20261009-73-0162

The vulnerability of the dpaltmodevdm function in the drivers/usb/typec/altmodes/displayport.c file of the USB TypeC driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a servi...

ROS-20261009-73-0195

The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261009-73-0344

The vulnerability of the drivers/char/ipmi/ipmiipmb.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20261009-73-0283

The vulnerability of the drivers/md/md-bitmap.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0512

The vulnerability of the gethallocinst function in the drivers/usb/gadget/function/fsubset.c file of the Linux USB device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20261009-73-0509

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

ROS-20261009-73-0507

The vulnerability of the comedideviceattach function in the drivers/comedi/drivers.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20261009-73-0482

The vulnerability of the setlinkstate function in the drivers/usb/gadget/udc/dummyhcd.c file of the Linux USB gadget driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failure...

ROS-20261009-73-0462

The vulnerability of the ov5647probe function in the drivers/media/i2c/ov5647.c file of the Linux kernel’s multimedia device driver is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261009-73-0359

The vulnerability in the drivers/media/radio/radio-keene.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0354

The vulnerability of the drivers/clocksource/shtmu.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0352

The vulnerability of the drivers/staging/rtl8723bs/osdep/ioctlcfg80211.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261009-73-0340

The vulnerability of the drivers/media/i2c/tw9903.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0333

The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261009-73-0321

The vulnerability of the agpamd64probe function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0294

The vulnerability in the drivers/media/i2c/ccs/ccs-core.c component of the Linux operating system is related to the lack of zero-division checking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0277

The vulnerability in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...