CVE-2026-23068 spi: spi-sprd-adi: Fix double free in probe error path

In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spiallochost to allocate the controller but registers it using devmspiregistercontroller. If devmregisterrestarthandler fails, the code jumps to the...

EUVD-2026-5503

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

EUVD-2025-206806

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

CVE-2025-71192 ALSA: ac97: fix a double free in snd_ac97_controller_register()

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

CVE-2025-71192

CVE-2025-71192 : In the Linux kernel, the ALSA AC97 driver contains a double-free in snd_ac97_controller_register. The patch fixes how references are dropped when ac97_add_adapter() fails (use put_device() instead of kfree), and adds kfree() on idr_alloc() failure and in ac97_adapter_release() fo...

CVE-2026-24933

The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability allows an unauthenticated remote attacker can perform a Man-in-the-Middle MitM attack to intercept the cleartext communication,...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to clean up the payload size, potentially leading to member overflow...

The vulnerability in the function vtpm_module_init() of the drivers/char/tpm/tpm_vtpm_proxy.c driver module allows a hacker to cause a service failure. This vulnerability targets Linux operating system-based alphanumeric devices with TPM cores.

The vulnerability of the vtpmmoduleinit function in the drivers/char/tpm/tpmvtpmproxy.c driver for Linux’s alphanumeric device drivers is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the intel_quark_thermal_init() function in the drivers/thermal/intel/intel_quark_dts_thermal.c file of the Linux kernel temperature management driver allows a hacker to cause a system failure.

The vulnerability of the intelquarkthermalinit function in the drivers/thermal/intel/intelquarkdtsthermal.c file of the Linux kernel temperature management driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the btrfs Drop_extent_map_range() function in the fs/btrfs/extent_map.c file of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs DropExtentMapRange function in the fs/btrfs/extentmap.c file of the Linux kernel operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the ieee80211_tx_dequeue() function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ieee80211txdequeue function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the target_free_cmd_counter() function in the drivers/target/target_core_transport.c module of the Linux kernel’s TCM driver allows a hacker to cause a service failure.

The vulnerability of the targetfreecmdcounter function in the drivers/target/targetcoretransport.c module of the Linux kernel’s TCM driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a perpetrator to cause service...

The vulnerability of the amd_pmc_stbdebugfs_open_v2() function in the drivers/platform/x86/amd/pmc.c file of the Linux kernel device driver module allows a hacker to cause a service failure.

The vulnerability of the amdpmcstbdebugfsopenv2 function in the drivers/platform/x86/amd/pmc.c file of the Linux kernel device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the af9005_i2c_xfer() function in the drivers/media/usb/dvb-usb/af9005.c file of the multimedia device driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the af9005i2cxfer function in the drivers/media/usb/dvb-usb/af9005.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the corrupt_bio_data() function in the drivers/md/dm-flakey.c driver for multiple Linux device controllers (RAID and LVM) allows a attacker to cause a service failure.

The vulnerability of the corruptbiodata function in the drivers/md/dm-flakey.c driver for multiple Linux device types RAID and LVM involves improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the imx_uart_probe() function in the drivers/tty/serial/imx.c module of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the imxuartprobe function in the drivers/tty/serial/imx.c module of the console TTY driver in the Linux kernel’s serial port is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __ext4_fill_super() function in the fs/ext4/super.c module of the Ext4 file system of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4fillsuper function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_endpoint_test_remove() function in the drivers/misc/pci_endpoint_test.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pciendpointtestremove function in the drivers/misc/pciendpointtest.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the do_ovl_get_acl() function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the doovlgetacl function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the snd_card_ymfpci_probe() function in the sound/pci/ymfpci/ymfpci.c module of the Linux kernel’s sound subsystem allows a hacker to cause a service failure.

The vulnerability of the sndcardymfpciprobe function in the sound/pci/ymfpci/ymfpci.c module of the Linux kernel’s audio subsystem is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...