CVE-2026-74690

CVE-2026-74690 is a Use-After-Free (UAF) vulnerability in the Linux kernel's s390/ism (Integrated Service Management) driver. During ism_dev_exit(), an active ISM interrupt handler can access the sba and ieq data structures after they have been freed. The fix calls free_irq() to drain in-flight i...

EUVD-2026-64590

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653

CVE-2026-74653 affects the Linux kernel 8250_of serial driver on NXP LPC32xx (PORT_LPC3220) hardware. The UART can latch an RX character-timeout interrupt while the RX FIFO is empty; because the interrupt is level-triggered and re-fires immediately, it causes an interrupt storm that livelocks the...

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74629

CVE-2026-74629 affects the Linux kernel's dibs (Device In-Band Signaling) subsystem and involves two memory-management defects in the lifecycle of dmb_clientid_arr. First, a use-after-free occurs when a dibs device interrupt handler remains active after dibs_dev_del() and continues to access the ...

EUVD-2026-64566

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmbclientidarr A dibs device interrupt handler can be active after dibsdevdel and may still access dmbclientidarr. UAF In case of a failure in dibsdevadd being called by dibslodevprobe dmbclientidarr ...

CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc()

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

CVE-2026-74617

CVE-2026-74617 affects the Linux kernel 's dibs device driver. The root cause is that dibs->lock was initialised in dibs_dev_add(), but a dibs device can already receive interrupts before that call: ism_probe() invokes ism_dev_init() (which calls request_irq()) prior to dibs_dev_add(). A GID e...

EUVD-2026-64554

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc()

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

CVE-2026-74690: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

PT-2026-79695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the s390/ism component. This occurs because an ism interrupt handler can remain active in parallel with the ism dev exit function, leading to the...

PT-2026-79622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where dibs-lock is initialized by dibs dev add, but a device may trigger interrupts before this call occurs. Specifically, ism probe executes ism dev init and request irq...

CVE-2026-74653: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

Linux Distros Unpatched Vulnerability : CVE-2026-74690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new...

PT-2026-79658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NXP LPC32xx UART PORT LPC3220 where an RX character-timeout interrupt can be latched while the RX FIFO is empty. In this state, the Interrupt Identification Regist...

Linux Distros Unpatched Vulnerability : CVE-2026-74653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is...

CVE-2026-74653: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

Linux Distros Unpatched Vulnerability : CVE-2026-74617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs...