EUVD-2026-77152

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver due to improper buffer size validation leads to kernel memory corruption and a system crash...

EUVD-2026-77143

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver due to improper cleanup upon vmap failure leads to a kernel crash...

CVE-2026-23787

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver due to improper cleanup upon vmap failure leads to a kernel crash...

CVE-2026-23787

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver due to improper cleanup upon vmap failure leads to a kernel crash...

CVE-2026-23787

A Use-After-Free vulnerability exists in the Exynos DRM HDR driver within the DPU component of Samsung Mobile Processors Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. The root cause is improper cleanup upon vmap failure , which leads to a kernel crash . The vulnerability is rat...

CVE-2026-23786: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash...

CVE-2026-23787: Use After Free

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver due to improper cleanup upon vmap failure leads to a kernel crash...

EUVD-2026-77142

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash...

PT-2026-90994

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver due to improper cleanup upon vmap failure leads to a kernel crash...

CVE-2026-23786

A TOCTOU race condition in the Exynos DRM HDR Driver (within the DPU) of Samsung Mobile Processors Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600 leads to a heap overflow , resulting in a kernel crash . The CVSS 3.1 score is 2.8 (Low) , with a local attack vector, high complexity...

CVE-2026-23788

A heap overflow in the Exynos DRM HDR driver of Samsung Mobile Processors Exynos 1280, 2200, and 1380 (DPU) can lead to kernel memory corruption and a system crash . The root cause is improper buffer size validation. The CVSS 3.1 score is 4.2 (MEDIUM) , reflecting a local attack vector with high ...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel

CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condi...

SUSE CVE-2026-89500

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpubuffer::freepage a bufferdatareadpage Discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuforder for the freepages call. This mismatched order may crashes the kernel...

SUSE CVE-2026-89657

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

SUSE CVE-2026-89749

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

Linux Distros Unpatched Vulnerability : CVE-2026-89460

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/cpumcf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run...

Linux Distros Unpatched Vulnerability : CVE-2026-89749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop...

Linux Distros Unpatched Vulnerability : CVE-2026-80984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: do not dereference an unset send buffer on the SMC-D teardown path smcclosestreamwait calls smctxpreparedsends from inside its skwaitevent condition, a...

Linux Distros Unpatched Vulnerability : CVE-2026-80992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer...