CVE-2026-90188

CVE-2026-90188 affects the Linux kernel 's null_blk block driver. When shared_tags is enabled, null_setup_tagset() allocates a global tag_set via null_init_global_tag_set(). If device creation subsequently fails, the err_dev error path destroys the default devices and calls unregister_blkdev() bu...

CVE-2026-90188 null_blk: free global tag_set on init error path

In the Linux kernel, the following vulnerability has been resolved: nullblk: free global tagset on init error path If sharedtags is enabled, nullsetuptagset allocates the global tagset via nullinitglobaltagset. If device creation later fails, errdev destroys the default devices and calls...

CVE-2026-90164 smb/server: abort initialization when proc setup fails

In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbdserverinit calls ksmbdprocinit before creating the remaining proc entries and server subsystems. ksmbdprocinit tears down partial state on a procfs or percpucounter...

EUVD-2026-81756

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

CVE-2026-90163 smb/server: call ksmbd_proc_cleanup() on module init failure

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

CVE-2026-93091: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Quiesce notifications before teardown scminotificationexit clears and releases the notification instance, but transport callbacks can still deliver incoming notifications until the TX/RX channels are freed...

PT-2026-94424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq init function where quantum and initial quantum are computed using psched mtu without overflow checks. When a device has an excessively large Maximum Transmissi...

PT-2026-94712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the acpi processor driver init function where the cpufreq policy notifier is registered before the ACPI processor driver and CPU hotplug state are established. If driv...

PT-2026-94711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs in the Linux kernel when KMS initialization fails. Specifically, when the priv-kms init function including mdp4 kms init and mdp5 kms init fails, the displa...

CVE-2026-90354: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915pciinithif2 was called unconditionally and again inside the WED-inactive branch. The helper increments the global hifidx, writes the PCIe RECOGID register and tak...

PT-2026-94403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usbatm atm init function where the ci range.vpi bits and ci range.vci bits fields are incorrectly initialized to a sentinel value of -1. These fields are...

PT-2026-94678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the logitech-hidpp driver where the hidpp ff init function fails to properly clean up resources during an initialization failure. Specifically, if allocations for the...

CVE-2026-89828

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpuvrammgrinit drmmcgroupregisterregion is called before INITLISTHEAD and gpubuddyinit in amdgpuvrammgrinit. If it fails, the function returns early and bypasses those initializations. Since...

DEBIAN-CVE-2026-89828

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpuvrammgrinit drmmcgroupregisterregion is called before INITLISTHEAD and gpubuddyinit in amdgpuvrammgrinit. If it fails, the function returns early and bypasses those initializations. Since...

CVE-2026-89828 drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpuvrammgrinit drmmcgroupregisterregion is called before INITLISTHEAD and gpubuddyinit in amdgpuvrammgrinit. If it fails, the function returns early and bypasses those initializations. Since...

CVE-2026-89828

This CVE affects the Linux kernel's amdgpu DRM driver . The root cause is an initialization ordering bug in amdgpu_vram_mgr_init(): the function drmm_cgroup_register_region() is called before the list heads and buddy allocator are initialized. If it fails, the early return skips those initializat...

CVE-2026-89828 drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpuvrammgrinit drmmcgroupregisterregion is called before INITLISTHEAD and gpubuddyinit in amdgpuvrammgrinit. If it fails, the function returns early and bypasses those initializations. Since...

CVE-2026-89785

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEXROOT in reparse/objid init ntfsreparseinit and ntfsobjidinit parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles the INDEXROOT attributes named $R and $O. They read i...

PT-2026-93527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the intel/ipu6 media component. The isys notifier init function initializes a notifier using v4l2 async nf init and subsequently adds remote sub-devices via v4l2...

PT-2026-93615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the nvme-fc module of the Linux kernel. The problem occurs when the nvme add ctrl function fails, which can happen under memory pressure or during fault...