TroPUF: Evaluating Hardware Trojan Insertion in Delay-Based Physical Unclonable Functions

Delay-based Physical Unclonable Functions PUFs are commonly used for device authentication and key generation due to the fact that they rely on manufacturing induced delay variations. However, these same variations make PUFs inherently non-deterministic, which can allow malicious logic to blend i...

PT-2026-64532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The loongson-rng rng alg contains multiple issues, including a lack of forward security and a use-after-free bug caused by the use of the wait for completion interruptible function...

PT-2026-64719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Industrial I/O IIO buffer hardware consumer where the scan mask is not properly freed during buffer release. This occurred because the scan mask storage was moved ...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

DEBIAN-CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

DEBIAN-CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

CVE-2026-64224

CVE-2026-64224 – Linux kernel (OcteonTX2 representor): The vulnerability arises in rvu_rep_rsrc_init(), which allocates queue memory before hw resources are initialized. If otx2_init_hw_resources() fails, it unwinds partially but the representor path may call otx2_free_hw_resources() again, riski...

CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64213

CVE-2026-64213 concerns the Linux kernel hwmon lm90 driver. The issue arises because lm90_alert() runs in the SMBus alert context and disables the hardware alert line via lm90_update_confreg() without acquiring hwmon_lock. Meanwhile, sysfs write paths (e.g., lm90_write_convrate) hold hwmon_lock a...

CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

CVE-2026-64213 hwmon: (lm90) Add lock protection to lm90_alert

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

PT-2026-64339

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3 Description A double free issue exists in the octeontx2-pf driver. The function rvu rep rsrc init allocates queue memory before calling otx2 init hw resources. If the hardware resource setup fails, otx2...

PT-2026-64344

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc3 Description An issue exists in the x86 memory management where broadcast TLB flushing remains enabled on AMD CPUs that support INVLPGB even when the system is booted with the nopcid option. This occurs because th...

USN-8596-1: Linux kernel (NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

The vulnerability of the geode_rng_init() function in the drivers/char/hw_random/geode-rng.c module of the Linux operating system’s character device driver framework allows a attacker to cause a service failure.

The vulnerability of the geodernginit function in the drivers/char/hwrandom/geode-rng.c file of the Linux kernel’s alphabetic devices driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-64832

FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ffnvdecstartframesepref error path frees...