PT-2026-64356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The rockchip GPIO driver contains several teardown issues and resource leaks within its remove path and error handling. Specifically, the debounce clock bank-db clk is obtained via of cl...

PT-2026-64329

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel panic occurs when handling machine check exceptions MCE from real mode. The issue is caused by the arch irq work raise function calling preempt disable, which attempts to access...

The vulnerability of the `regmap_add_irq_chip_fwnode()` function in the `drivers/base/regmap/regmap-irq.c` file of the Linux kernel’s interrupt device driver allows a attacker to cause a system failure.

The vulnerability of the regmapaddirqchipfwnode function in the drivers/base/regmap/regmap-irq.c file of the Linux kernel’s interrupt device driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2026-64014

A flaw was found in the Linux kernel's usbtouchscreen driver. A local attacker with a specially crafted USB touch screen device could exploit this vulnerability by sending a malicious interrupt packet with an oversized length field. This improper handling of input lengths can lead to an...

CVE-2026-63960

A flaw was found in the Linux kernel's USB Type-C WCOVE driver. A malicious USB device could exploit a buffer overflow vulnerability in the wcovereadrxbuffer function. This flaw allows an attacker to write data beyond the intended buffer, potentially corrupting memory on the system's interrupt...

CVE-2026-63956

A flaw was found in the Linux kernel's cypressm8 USB serial driver. A malicious Universal Serial Bus USB device could report a packet size smaller than eight bytes for the interrupt-out endpoint. This can lead to memory corruption, specifically user-controlled slab corruption or a NULL-pointer...

CVE-2026-8988

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access...

CVE-2026-63862

A flaw was found in the Linux kernel's MediaTek PCIe Peripheral Component Interconnect Express generation 3 driver. This vulnerability occurs because interrupt request IRQ domains are allocated before verifying the controller's IRQ. If the IRQ fetch fails, the allocated domains are not properly...

kernel: flex_proportions: make fprop_new_period() hardirq safe

A deadlock vulnerability was found in the Linux kernel's flexible proportions fprop code used for I/O writeback accounting. When a hardirq interrupts the seqcount write section in fpropnewperiod during softirq context, a reader in the hardirq handler can spin indefinitely waiting for the odd...

SUSE CVE-2026-63862

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtkpciesetupirq, the IRQ domains are allocated before the controller's IRQ is fetched. If the latter fails, the function directly returns an error, without...

SUSE CVE-2026-63897

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data and leaking it to user space...

SUSE CVE-2026-63902

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: validate interrupt packet headers cypressreadintcallback parses the interrupt-in buffer according to the selected Cypress packet format. Format 1 has a two-byte status/count header and format 2 has a...

SUSE CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...

SUSE CVE-2026-63904

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actuallength for interrupt-IN notifications USBTMC devices can use an optional interrupt endpoint for notification messages. These typically contain two-byte headers indicating the payload format, but the...

SUSE CVE-2026-63955

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG on BH disabled context getvmareanode currently triggers a BUG if ininterrupt returns true. However, ininterrupt also reports true when BH are disabled. The bridge code can call...

SUSE CVE-2026-63956

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

SUSE CVE-2026-64038

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Stop work before releasing hwmon device Sashiko reports: In lm90probe, the devm action to cancel the alertwork and reportwork lm90restoreconf is registered in lm90initclient before devmhwmondeviceregisterwithinfo is...

CVE-2026-63798

A flaw was found in the Linux kernel's irqchip/imgpdc driver. This vulnerability occurs because the driver fails to properly free allocated resources and remove interrupt handlers when the driver is removed. This oversight can lead to a use-after-free condition, where the system attempts to acces...

CVE-2026-64105

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the virtual Generic Interrupt Controller vgic component. When a virtual CPU vCPU fails to initialize, the private Interrupt ReQuests IRQs allocated for it are not properly released...

CVE-2026-64172

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem, specifically affecting Hygon Family 18h processors. Due to an erratum, the hardware may incorrectly read a stale status bit during interrupt processing, preventing the virtual machine from exiting as expected. This...