CVE-2026-64221

The CVE-2026-64221 entry concerns the Linux kernel SPI TI-QSPI driver. The flaw is a use-after-free after DMA setup failure: during probe, the driver falls back to PIO if DMA setup fails, and the fix ensures the DMA channel pointer is cleared if buffer allocation fails to avoid passing a released...

CVE-2026-64221 spi: ti-qspi: fix use-after-free after DMA setup failure

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...

CVE-2026-64221 spi: ti-qspi: fix use-after-free after DMA setup failure

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...

CVE-2026-64215

In the Linux kernel, a fix was applied to the DRM MSM A6xx driver (a8xx_hfi_send_perf_table) to check the return value of kzalloc() and prevent a NULL pointer dereference on allocation failure. This addresses a memory allocation failure path in the a6xx HFI perf table setup. The fix is documented...

GHSA-M596-67P7-69WH ImageMagick: Memory leak in VIFF encoder when allocation fails

When an allocation fails in the VIFF encoder a memory leak will occus...

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

When an allocation fails in the TIFF encoder a small memory leak will occur...

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

When a blob can not be opened a memory leak will occur when encoding a JNG file...

ImageMagick: Memory Leak in hough lines operation when an operation fails

When a specific operation fails in the hough lines operation a small memory leak will occur...

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

When transforming an image to the log colorspace a small memory leak happens when the operation fails...

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

When a memory allocation fails inside the FormatMagickCaption method a dangling pointer still points to the freed memory...

ImageMagick: Use-After-Free when freetype initialization fails

When the freetype initialization fails the method does not exit and uses memory that was freed...

EUVD-2026-48559

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and den...

kernel: scsi: core: Wake up the error handler when final completions race against each other

Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...

SUSE CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

PT-2026-64372

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues ...

The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

PT-2026-64330

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx hfi send perf table Check the return value of kzalloc to prevent a NULL pointer dereference on allocation failure. Patchwork: https://patchwork.freedesktop.org/patch/721342/...

PT-2026-64337

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2 pool aq init frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2 sq aura pool init unwinds the partial...

PT-2026-64349

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch uart: add check for dma alloc coherent Add a check for dma alloc coherent failure to prevent a potential NULL pointer dereference in dma handle rx. Properly release DMA channels and the PCI device reference using...