CVE-2026-93159 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

CVE-2026-93159

CVE-2026-93159 affects the atmel-sha204a hardware RNG driver in the Linux kernel . In the nonblocking RNG path, a work_data structure is allocated to track in-flight asynchronous I2C requests and stored in rng->priv. If the I2C transfer fails, the previous code only logged a warning but left t...

EUVD-2026-82267

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

EUVD-2026-82228

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: fix out-of-bounds read of qwsign osdescqwsignshow passes OSSTRINGQWSIGNLEN as the input length to utf16stoutf8s, but that argument counts UTF-16 code units while OSSTRINGQWSIGNLEN 14 is the byte size of...

CVE-2026-93054

CVE-2026-93054 is a use-after-free vulnerability in the Linux kernel's UIO (Userspace I/O) driver. After device_add(), the UIO device becomes visible to userspace. If a subsequent setup step fails, __uio_register_device() unwinds the device but leaves idev->info pointing at a caller-owned stru...

CVE-2026-93054 uio: Fix stale info pointer in failed registration path

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...

EUVD-2026-82164

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...

CVE-2026-93054 uio: Fix stale info pointer in failed registration path

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...

EUVD-2026-82141

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

CVE-2026-92517 bpf, riscv: Fix extable handling for arena load_acquire

In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena loadacquire emitatomicldst returns 1 to have buildbody skip the zext after a sub-word loadacquire. The caller does "ret = ret ?: addexceptionhandler...", which skips addexceptionhandler ...

CVE-2026-90394 power: supply: sc2731_charger: cancel work on remove

In the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731charger: cancel work on remove The USB notifier and initial charger detection can schedule info-work. The remove path unregisters the notifier, but does not cancel queued or running work before the...

EUVD-2026-81968

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90257 Bluetooth: virtio_bt: avoid OOB read of build info string

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtiobt: avoid OOB read of build info string The virtbtsetupzephyr sends the Zephyr vendor command 0xfc08 Read Build Information and hands the response to btdevinfo and hcisetfwinfo as a "%s" string starting at skb-da...

EUVD-2026-81844

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MSFT: validate evtprefixlen against the response length readsupportedfeatures only checks that the response covers the fixed part of struct msftrpreadsupportedfeatures, which is 11 bytes: if skb-len evtprefixlen is an...

CVE-2026-90161 erofs: fix interlaced ztailpacking pclusters

In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should be block-aligned, and ztailpacking interlaced pclusters should be invalid at all. Currently, mkfs.erofs won't generate any interlaced...

CVE-2026-92957

creationtimestamp| type| source ---|---|--- 2026-09-17 16:01:15+00:00| seen| https://gist.github.com/ichintu/9f4093a6b4ddd813b30d10c5546af295 2026-09-17 16:10:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvq25ddenw2t 2026-09-17 17:00:10+00:00| seen|...

CVE-2026-92938

creationtimestamp| type| source ---|---|--- 2026-09-17 16:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpzkgbkv52n 2026-09-17 16:08:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvpzzov4kj25 2026-09-17 18:34:21+00:00| seen|...

CVE-2026-92950

creationtimestamp| type| source ---|---|--- 2026-09-17 15:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpxuq5hp72f 2026-09-17 16:09:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvq23rltdx2n 2026-09-17 18:34:21+00:00| seen|...

CVE-2026-92934

creationtimestamp| type| source ---|---|--- 2026-09-17 15:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpxctorhh2f 2026-09-17 16:08:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvpzyvtj2o2t 2026-09-17 16:16:04+00:00| seen|...