AZL-102134 CVE-2026-90386 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-90386

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-93202

CVE-2026-93202 is a deadlock vulnerability in the Linux kernel i3c master driver. The function i3c_master_register_new_i3c_devs() calls device_register() while holding i3c_bus_normaluse_lock() (a read-side rwsem). The resulting device probe callback may invoke I3C helpers that re-acquire the same...

CVE-2026-93202 i3c: master: Fix recursive locking during device registration

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

EUVD-2026-82310

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

CVE-2026-93202 i3c: master: Fix recursive locking during device registration

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

CVE-2026-93200 i3c: master: Fix use-after-free of master->this

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

CVE-2026-93200

CVE-2026-93200 affects the Linux kernel's i3c (Improved Inter-chip) master controller driver. The root cause is a use-after-free of the master->this pointer: it is freed in i3c_master_detach_free_devs() before the master device itself is released, yet sysfs attribute callbacks still dereferenc...

CVE-2026-93199

Linux kernel i3c master driver contains a logic flaw in the function i3c_master_search_i3c_dev_duplicate(). The function searches the I3C bus for another device sharing the same PID as a reference device, but can incorrectly match master->this—the I3C controller itself. Since the controller is...

EUVD-2026-82308

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93200 i3c: master: Fix use-after-free of master->this

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

EUVD-2026-82307

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

EUVD-2026-82047

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-90386

This Linux kernel vulnerability affects the DesignWare I3C master driver (drivers/i3c/master/dw-i3c-master.c:905). On an empty I3C bus, the ENTDAA (Enhanced Dynamic Address Assignment) command assigns no devices, causing cmd->rx_len to equal master->maxdevs. The resulting GENMASK() index be...

CVE-2026-90386 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-90386 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-93200: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-90386: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...