CVE-2026-93180

A flaw was found in the panthor component of the Linux kernel. A local attacker could exploit this vulnerability by performing a partial unmap of an evicted Buffer Object BO when the Graphics Processing Unit GPU mapping is split. This occurs because the logic for handling partial unmap of huge...

CVE-2026-93179

A flaw was found in the drm/amd/powerplay component of the Linux kernel. This vulnerability occurs when the VBIOS Video Basic Input/Output System provides a malformed VoltageObjectInfo table, which can lead to an infinite loop or an out-of-bounds OOB read in the system's memory. This could...

CVE-2026-93178

A flaw was found in the Linux kernel's drm/amdgpu/pm/powerplay component. This vulnerability arises because the vddInd and vddcInd fields, derived from VBIOS-parsed tables, are used to index into voltage lookup tables without proper boundary checks. A local attacker could exploit this by providin...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CVE-2026-93176

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. Specifically, the amdgpudmplanedrmplanereset function attempts to free memory before successfully allocating a new state. Should the new memory allocation fail, a dangling pointer to the previously freed memory remains. Th...

CVE-2026-93175

A flaw was found in the Linux kernel's display driver for AMD graphics, specifically within the drm/amd/display component. This vulnerability occurs in the amdgpudmcrtcresetstate function when it attempts to reset the display state. If a memory allocation fails during this process, the system can...

CVE-2026-93174

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When handling per-CPU map elements, the copymapvaluelong function incorrectly copies only the map-valuesize instead of the full allocated size, which includes padding. This oversight can lead to user-space applications,...

CVE-2026-93171

A flaw was found in the Linux kernel's leds: lp5860 component. This vulnerability occurs when the lp5860deviceinit function attempts to unlock a mutex that has already been released, specifically if the lp5860initdt function fails. Such a double-unlock operation can lead to unexpected system...

CVE-2026-93170

A flaw was found in the Linux kernel's Xilinx DMA Direct Memory Access engine. A race condition in the AXIDMA and MCDMA interrupt handlers can cause the DMA channel to be incorrectly marked as idle while data transfer descriptors are still being processed. This premature idle state can lead to...

CVE-2026-93169

A flaw was found in the Linux kernel's dmaengine: zynqmpdma component. A race condition exists during device removal, specifically in the zynqmpdmaremove function, where runtime power management PM is disabled after checking the device state and performing a manual suspend. This timing issue can...

CVE-2026-93168

A flaw was found in the Linux kernel's dmaengine: xilinxdma component. When the xilinxdmapolltimeout function is called with a zero-value delay and an unfulfilled condition, the CPU can enter a prolonged busy-wait state. This occurs due to an underestimation of wall clock time, causing the system...

CVE-2026-93167

A flaw was found in the Linux kernel. When tracing system calls on C-SKY ABIv2, an issue in restoring register values a4/a5 can lead to incorrect arguments being passed to certain system calls. This can cause traced applications to fail or behave unexpectedly, potentially resulting in a denial of...

CVE-2026-93166

A flaw was found in the wifi: rtw89 driver of the Linux kernel. An off-by-one error in the rtw89ppdustr function, due to an incorrect comparison, can lead to an out-of-bounds access. This vulnerability could potentially result in a denial of service or information disclosure...

CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...

CVE-2026-93164

A flaw was found in the Linux kernel. Optimized uprobes, a mechanism for dynamic tracing, can improperly overwrite a protected memory region known as the redzone area. This occurs when a call instruction stores a return address on the stack without adequately adjusting the stack pointer,...

CVE-2026-93163

A flaw was found in the hwrng core component of the Linux kernel. When the hwrngregister function fails during the registration process, it does not properly remove the hardware random number generator RNG from the global list. This oversight creates a dangling reference, which can lead to a...

CVE-2026-93162

A flaw was found in the Linux kernel's QAT QuickAssist Technology driver. When re-enabling SR-IOV Single Root I/O Virtualization, the QAT reset worker queues a work item using data allocated on the stack. If a timeout occurs during this process, the reset worker can return while the work item,...

CVE-2026-93157

A flaw was found in the xilinx-trng hardware random number generator HWRNG driver in the Linux kernel. The xtrngreadblock32 function can incorrectly indicate a successful read even when a timeout occurs and no random data has been produced. This can result in the kernel processing incomplete or...

CVE-2026-93160

A flaw was found in the Linux kernel's atmel-ecc cryptographic driver. The hardware Elliptic Curve Diffie-Hellman ECDH computation could use a private key that was not generated for the current cryptographic operation. This issue arises because the public key is only cached after a private key is...

CVE-2026-93156

A flaw was found in the Linux kernel's rk3288 crypto driver. The rkhashrun function fails to properly handle a HASH idle timeout, ignoring the poll result. This can lead to the driver finalizing a cryptographic request with a previous success value, even if the hash engine is not idle...