CVE-2026-68182 comedi: comedi_parport: deal with premature interrupt

In the Linux kernel, the following vulnerability has been resolved: comedi: comediparport: deal with premature interrupt Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the interrupt handler parportinterrupt in the "comediparport" driver, but it do...

EUVD-2026-55283

In the Linux kernel, the following vulnerability has been resolved: comedi: comediparport: deal with premature interrupt Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the interrupt handler parportinterrupt in the "comediparport" driver, but it do...

CVE-2026-68092

The CVE-2026-68092 issue affects the Linux kernel where the time/jiffies clocksource is used before it is registered during early boot, leaving max_delta_raw at zero and halting time progress. This caused long boot delays (notably on XEN HVM in some cases). The documented fix initializes the jiff...

CVE-2026-64602

The CVE describes a race condition in spear_adc_probe() for the Linux kernel IIO SPI driver: devm_request_irq() is called before st->completion is initialized, so an IRQ arriving early may call complete() on an uninitialized completion, dereferencing a NULL list entry and causing a kernel pani...

CVE-2026-64602 iio: adc: spear: Initialize completion before requesting IRQ

In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "spearadcprobe in drivers/iio/adc/spearadc.c registers its interrupt handler with devmrequestirq before it initializes st-completion...

SUSE CVE-2026-64420

In the Linux kernel, the following vulnerability has been resolved: mfd: crosec: Delay devsetdrvdata until probe success If ecdeviceprobe fails, crosecclassrelease releases memory for the crosecdev structure. However, because the drvdata was already set, sub-drivers like crosectypec can still...

CVE-2026-64500

In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "lpc32xxadcprobe in drivers/iio/adc/lpc32xxadc.c registers its interrupt handler with devmrequestirq before it initializes...

EUVD-2026-48876

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

PT-2026-64721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lpc32xx adc probe function within the drivers/iio/adc/lpc32xx adc.c file. The function registers an interrupt handler using devm request irq before initializing th...

CVE-2026-64239

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regionsrmdirs DAMON sysfs maintains the DAMOS tried region directory objects via a linked list. When the user requests refresh of the directories, DAMON sysfs removes all the region...

PT-2026-64354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the DAMON sysfs implementation. The system maintains DAMOS tried region directory objects using a linked list. When a user requests a directory refresh,...

CVE-2026-64162 idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

In the Linux kernel, the following vulnerability has been resolved: idpf: fix readdevclklock spinlock init in idpfptpinit In idpfptpinit, readdevclklock is initialized after ptpscheduleworker had already been called and after idpfptpsettime64 could reach the lock. The PTP aux worker fires...

CVE-2026-64162

CVE-2026-64162 concerns the Linux kernel idpf driver: a read_dev_clk_lock spinlock could be used before initialization because the lock was not initialized before ptp aux work could run. The issue arises when idpf_ptp_init() initializes read_dev_clk_lock after ptp_schedule_worker() has started an...

CVE-2026-64162

In the Linux kernel, the following vulnerability has been resolved: idpf: fix readdevclklock spinlock init in idpfptpinit In idpfptpinit, readdevclklock is initialized after ptpscheduleworker had already been called and after idpfptpsettime64 could reach the lock. The PTP aux worker fires...

CVE-2026-64005

Summary: CVE-2026-64005 affects the Linux kernel net/smc hashtables. The vulnerability arises from INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) being re-initialized after smc_nl_init(), proto_register(), and sock_register(), which can reset hashinfo.ht entries that are still in use and lead to a corrupte...

CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...

CVE-2026-53399

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

PT-2026-61479

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the idpf ptp init function where the read dev clk lock spinlock is initialized after the ptp schedule worker function has been called. This sequence allows the PTP...

Linux Distros Unpatched Vulnerability : CVE-2026-53332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is...