CVE-2026-74298

CVE-2026-74298 pertains to the Linux kernel, specifically the RDMA/core path. The vulnerability is resolved by fixing the FRMR set pinned push error path and by adding destruction of FRMR handles when pushing to the pool fails, preventing resource leaks if pool page allocation fails. Documents do...

CVE-2026-74298 RDMA/core: Fix FRMR set pinned push error path

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fails. This prevents resources leak in case pool page allocation fails...

EUVD-2026-59445

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fails. This prevents resources leak in case pool page allocation fails...

CVE-2026-72496

CVE-2026-72496 affects the Linux kernel RDMA/bnxt_re path. The root cause is in bnxt_qplib_alloc_dpi returning success when ioremap fails; the fix adds proper rollback on ioremap failure and returns -ENOMEM. The published metrics indicate a CRITICAL base score (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:C/C...

CVE-2026-72485

CVE-2026-72485 describes a Linux kernel vulnerability in the coresight platform where nr_outconns/nr_inconns were incremented before allocations, causing a premature counter bump and potential panics during cleanup when allocations failed. The issue affects the coresight_add_out_conn() and coresi...

CVE-2026-72479

CVE-2026-72479 affects the Linux kernel IIO MMA8452 accelerometer driver. The issue occurs in mma8452_read() when an I2C read call to i2c_smbus_read_i2c_block_data() fails but mma8452_set_runtime_pm_state() succeeds; in that path, mma8452_read() returns 0, causing mma8452_read_raw() to use an uni...

EUVD-2026-59378

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

CVE-2026-72479 iio: accel: mma8452: handle I2C read error(s) in mma8452_read()

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

CVE-2026-72479 iio: accel: mma8452: handle I2C read error(s) in mma8452_read()

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

CVE-2026-72459 apparmor: aa_label_alloc use aa_label_free on alloc failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources...

CVE-2026-72459 apparmor: aa_label_alloc use aa_label_free on alloc failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources...

CVE-2026-72459

CVE-2026-72459 concerns the Linux kernel AppArmor path: in aa_label_alloc(), a secid is allocated before creating the label proxy. If the subsequent proxy step fails, the error path currently frees only the label memory, leaking resources initialized by aa_label_init(). The fix is to call aa_labe...

CVE-2026-72457 apparmor: fail policy unpack on accept2 allocation failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

CVE-2026-72457 apparmor: fail policy unpack on accept2 allocation failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

EUVD-2026-59356

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

CVE-2026-72453

The CVE-2026-72453 issue affects the Linux kernel regcache initialization path. If an error occurs in the cache_ops->populate callback and the cache operations include an exit callback, the error code from populate() is overwritten by the exit() return value, hiding the real error from regcach...

CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

EUVD-2026-59352

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

CVE-2026-72445 ALSA: usb-audio: qcom: clear opened when stream enable fails

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs-opened is set before the serviceinterval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged a...