USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

Linux UFS Kernel Heap Buffer Overflow DoS

The vulnerability of the ufshcdmcqpollcqelock function in the drivers/ufs/core/ufs-mcq.c module related to UFS host controllers in the Linux operating system is associated with the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-46091

A flaw was found in the igorplugusb component of the Linux kernel. The USB request structure, when handled by Direct Memory Access DMA on certain host controllers, did not properly follow DMA coherency rules. This oversight could lead to data integrity issues or unexpected system behavior, as the...

EUVD-2026-32474

In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: heed coherency rules In a control request, the USB request structure can be subject to DMA on some HCs. Hence it must obey the rules for DMA coherency. Allocate it separately...

CVE-2026-46091

CVE-2026-46091 : Linux kernel vulnerability in the igorplugusb driver where a USB control request may be subject to DMA, violating DMA coherency rules. The resolution requires allocating the affected structure separately to enforce coherency. Public records identify the issue across multiple dist...

PT-2026-43959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description A DMA coherency issue exists in the igorplugusb driver within the media subsystem. In a control request, the USB request...

Ubuntu Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-8204-1)

"The remote Ubuntu Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8204-1 advisory. Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

Linux UFS Host Controllers DoS

The vulnerability of the ufsqcomconfigesi function in the drivers/ufs/host/ufs-qcom.c module, which supports UFS host controllers in Linux operating systems, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ufshcd_cmd_inflight Heap Buffer Overflow DoS

The vulnerability of the ufshcdcmdinflight function in the drivers/ufs/core/ufshcd.c file affects UFS Universal Flash Storage host controllers. In Linux operating systems, this function is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise...

ufshcd Heap Buffer Overflow DoS

The vulnerability of the ufshcdremove function in the drivers/ufs/core/ufshcd.c file affects UFS-host controller support. In Linux operating systems, this vulnerability is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-7651-4 linux-gcp, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

USN-7594-3 linux-aws, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux UML; - x...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from xhciplatremove not properly handling shared HCDs, which could lead to null pointer dereferencing...

USN-7516-3 linux-azure, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7510-5 linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

UFS Kernel Heap Buffer Overflow DoS

The vulnerability in the ufshcdsetdmamask function within the drivers/ufs/core/ufshcd.c module is related to host-controlled UFS Universal Flash Storage. Linux kernel memory reuse mechanisms are involved. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality...

libtta 'console/tta.cpp' divide-by-zero denial-of-service vulnerability

libtta is the library in linux that supports ATA host controllers. The Libtta 'console/tta.cpp' function has a divide-by-zero error that allows an attacker to exploit a vulnerability to crash the application...

libtta 'encoder::process_stream()' heap buffer overflow vulnerability

libtta is the library in linux that supports ATA host controllers. A heap-based buffer overflow exists in the libtta 'encoder::processstream' function, allowing an attacker to exploit the vulnerability to crash the application...