354584 matches found
CVE-2026-64494
The CVE-2026-64494 issue affects the Linux kernel IIO driver for gp2ap002 (iio: light). The root cause is that gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, and if gp2ap002_get_lux() fails, the function returns early, bypassing pm_runtime_put_autosuspend() and perm...
CVE-2026-64493
The CVE-2026-64493 issue affects the Linux kernel iio: pressure: mpl115 subsystem. The vulnerability arises in mpl115_read_raw() which takes a runtime PM reference via pm_runtime_get_sync() before reading processed pressure or raw temperature; on read errors it can return without pm_runtime_put_a...
CVE-2026-64492
CVE-2026-64492 affects the Linux kernel iio: temperature tmp006 driver. The issue arises when tmp006_probe() allocates the DRDY trigger with devm_iio_trigger_alloc() but registers it with iio_trigger_register() and lacks a .remove() callback, leaving a dangling trigger entry after module unload. ...
EUVD-2026-48836
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...
CVE-2026-64492
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...
CVE-2026-64491
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule...
CVE-2026-64491 ALSA: usx2y: us144mkii: fix work UAF on disconnect
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule...
CVE-2026-64491
CVE-2026-64491 affects the Linux kernel’s ALSA subsystem for usx2y/us144mkii. The bug arises in tascam_disconnect(): capture_work and midi_in_work are canceled after URBs are killed, but some URBs may complete in the window between cancel_work_sync() and usb_kill_anchored_urbs(), re‑arming the wo...
EUVD-2026-48835
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule...
CVE-2026-64491 ALSA: usx2y: us144mkii: fix work UAF on disconnect
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule...
EUVD-2026-48833
In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...
CVE-2026-64490 ALSA: virtio: Validate control metadata from the device
In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the device-provided control type and value count returned by the device. That metadata is then used directly to index gv2atypemap in...
CVE-2026-64489
In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...
CVE-2026-64490
CVE-2026-64490 affects the Linux kernel ALSA virtio sound driver. The vulnerability arises when virtio-snd control metadata provided by a device (control type and value count) is trusted without validation, allowing out-of-bounds access in virtsnd_kctl_info(), virtsnd_kctl_get(), and virtsnd_kctl...
EUVD-2026-48834
In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the device-provided control type and value count returned by the device. That metadata is then used directly to index gv2atypemap in...
CVE-2026-64489
Summary (technical): CVE-2026-64489 affects the Linux kernel, specifically the ALSA ymfpci component. The vulnerability arises because snd_ctl_new1() can return NULL on memory allocation failure, and the subsequent code path in snd_ymfpci_create_spdif_controls() dereferences kctl->id.device wi...
CVE-2026-64489 ALSA: ymfpci: check snd_ctl_new1() return value
In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...
CVE-2026-64488 ALSA: aoa: check snd_ctl_new1() return value
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...
EUVD-2026-48832
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...
CVE-2026-64488
CVE-2026-64488 concerns the Linux kernel ALSA aoa subsystem. According to multiple sources, the issue arises when snd_ctl_new1() can return NULL on allocation failure, and code in layout.c dereferences ctl->id.name or passes the value without verifying the NULL return. The result is a NULL poi...