Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fixed a reference leak when pmruntimegetsync fails. The PM reference count is not expected to be incremented on a return in lpi2cimxmasterenable. However, pmruntimegetsync will still increment the PM reference cou...

ps5-uart

Cabecera de 24 pines cerca de salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800...

AZL-99467 CVE-2026-80802 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdpncii2cread takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2cmasterrecv count into a...

Linux Distros Unpatched Vulnerability : CVE-2026-80802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: fdp: bound the device-reported read length and fix an skb leak fdpncii2cread takes the next packet length from two device-supplied bytes and never validate...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: qup: failing to exit from the loop in case of timeout. The original logic only sets the return value, but does not exit from the loop if the bus remains active due to a malicious or buggy i2c client. This is unexpected. Such...

Astra Linux – Vulnerability in Linux 5.15

A buffer overflow vulnerability was discovered in the Linux kernel’s Intel iSMT SMBus host controller driver, particularly in its handling of the I2CSMBUSBLOCKPROCCALL case using the ioctl I2CSMBUS function. This flaw could allow a local user to cause the system to crash...

CVE-2026-74547

A flaw was found in the Linux kernel's hwmon adt7470 component. A local user can exploit this by configuring the 'autoupdateinterval' to zero via sysfs while 'numtempsensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources an...

CVE-2026-74547

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

UBUNTU-CVE-2026-74547

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

CVE-2026-74547 hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

CVE-2026-74547

The CVE-2026-74547 entry concerns the Linux kernel hwmon driver for adt7470. When auto_update_interval is set to 0, the background update thread can schedule a zero-delay wakeup and, if num_temp_sensors is 0, msleep_interruptible() also becomes 0, causing a tight, unbounded busy-loop that hogs CP...

UBUNTU-CVE-2026-72141

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-64274

In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...

CVE-2026-64270 Input: mms114 - reject an oversized device packet size

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...

EUVD-2026-46011

In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check only clamps it to avoid overrunning the chip-words256 register array,...

CVE-2026-64135

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...

PT-2026-61105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the registration of I2C adapters. The i2c get adapter function allows looking up adapters by ID and takes a reference to the embedded struct device. If an...

PT-2026-43868

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description Two issues exist in the pt5161l read block data function within the hwmon component. First, a buffer overrun occurs because...

CVE-2026-31549

In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device serial string as the i2c adapter name but does not make sure that the string exists. Verify that the device has a serial number before...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8200-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8200-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...