DEBIAN-CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-64239

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regionsrmdirs DAMON sysfs maintains the DAMOS tried region directory objects via a linked list. When the user requests refresh of the directories, DAMON sysfs removes all the region...

CVE-2026-64226

In the Linux kernel, CVE-2026-64226 is addressed in sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path. The vulnerable sequence dereferenced p->comm and p->pid after put_task_struct(p) in scx_root_enable_workfn(); when the iterator’s reference was last dropped, the task coul...

CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64222 octeontx2-pf: avoid double free of pool->stack on AQ init failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack when mailbox sync or retry allocation fails, but leaves the pointer unchanged. Later, otx2sqaurapoolinit unwinds the partial setup...

CVE-2026-64220 device property: set fwnode->secondary to NULL in fwnode_init()

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-64220

CVE-2026-64220 — Linux kernel : The issue arises when a firmware node is allocated (stack or heap) with a non-zeroing allocator and initialized via fwnode_init(), leaving fwnode->secondary with uninitialized memory. This can lead to dereferencing a non-NULL, non-ERR pointer (e.g., in dev_to_sw...

GHSA-6JWG-7Q3P-5FQM ImageMagick: Use-After-Free when freetype initialization fails

When the freetype initialization fails the method does not exit and uses memory that was freed...

ImageMagick: Use-After-Free when freetype initialization fails

When the freetype initialization fails the method does not exit and uses memory that was freed...

PT-2026-64354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the DAMON sysfs implementation. The system maintains DAMOS tried region directory objects using a linked list. When a user requests a directory refresh,...

CVE-2026-6924

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

CVE-2026-6924

CVE-2026-6924 describes a weak entropy initialization in SiWx917 TinyCrypt used by Silicon Labs Matter, causing the DRBG to seed from a predictable source. As a result, all random numbers in the Matter code may derive from the same stream, reducing unpredictability. The CVSS vector in the documen...

CVE-2026-6924

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

EUVD-2026-48399

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

CVE-2026-16584

Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy enforcement data...