SUSE CVE-2026-98998

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

Linux Distros Unpatched Vulnerability : CVE-2026-98998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct...

UBUNTU-CVE-2026-98998

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

DEBIAN-CVE-2026-98998

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-98998

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-98998

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-98998 drm/bridge: th1520-dw-hdmi: Fix remove() callback

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-98998

The Linux kernel contains a vulnerability in the drm/bridge: th1520-dw-hdmi driver. The issue stems from a type mismatch during the removal process: the driver stores a struct th1520_hdmi * in the platform drvdata, but the th1520_dw_hdmi_remove() function incorrectly reads it back as struct dw_hd...

EUVD-2026-108792

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-98998 drm/bridge: th1520-dw-hdmi: Fix remove() callback

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

CVE-2026-98998

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct dwhdmi and passing it to dwhdmiremove, so teardown runs on the wrong...

PT-2026-121975

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520 hdmi in platform drvdata, but th1520 dw hdmi remove was reading it back as struct dw hdmi and passing it to dw hdmi remove, so teardown runs on the...

CVE-2026-89993

A flaw was found in the Linux kernel's dmaengine: dw-edma driver. A local attacker could exploit a timing issue where interrupt data is not fully initialized before an interrupt is requested. This could lead to a NULL pointer dereference when a shared interrupt handler is invoked, causing the...

CVE-2026-90386

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit dw driver. When the system attempts to assign dynamic addresses on an empty I3C bus, a calculation error leads to a 'shift-out-of-bounds' condition. This can cause the system to crash, resulting in a Denial of Service Do...

CVE-2026-93041

A flaw was found in the Linux kernel's dw-edma component. A race condition exists where the dwedmaabortinterrupt function prematurely releases a lock, allowing the issuepending function to access outdated Direct Memory Access DMA channel status information. This can lead to new DMA descriptors...

CVE-2026-93042

A flaw was found in the Linux kernel's dmaengine: dw-edma component. This vulnerability occurs because the dw-edma driver incorrectly calls a callback function after a Direct Memory Access DMA descriptor has been terminated. This can lead to a use-after-free condition, where the system attempts t...

CVE-2026-93040

A flaw was found in the Linux kernel's dmaengine: dw-edma component. A race condition exists where the pause and resume functions can access and modify the channel state without proper synchronization, while interrupt handlers update the same state under a lock. This inconsistency can lead to a...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: Do not print NULL LLI during an error. During debugging, we encountered an issue where the axichandumplli function was passed a NULL LLI pointer, which ultimately caused an OOPS error due to attempts to...