CVE-2026-90386

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-93202 i3c: master: Fix recursive locking during device registration

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

EUVD-2026-82310

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

CVE-2026-93202 i3c: master: Fix recursive locking during device registration

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

CVE-2026-93200 i3c: master: Fix use-after-free of master->this

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93199

Linux kernel i3c master driver contains a logic flaw in the function i3c_master_search_i3c_dev_duplicate(). The function searches the I3C bus for another device sharing the same PID as a reference device, but can incorrectly match master->this—the I3C controller itself. Since the controller is...

CVE-2026-93200

CVE-2026-93200 affects the Linux kernel's i3c (Improved Inter-chip) master controller driver. The root cause is a use-after-free of the master->this pointer: it is freed in i3c_master_detach_free_devs() before the master device itself is released, yet sysfs attribute callbacks still dereferenc...

EUVD-2026-82307

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

CVE-2026-93200 i3c: master: Fix use-after-free of master->this

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

EUVD-2026-82308

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-90386

This Linux kernel vulnerability affects the DesignWare I3C master driver (drivers/i3c/master/dw-i3c-master.c:905). On an empty I3C bus, the ENTDAA (Enhanced Dynamic Address Assignment) command assigns no devices, causing cmd->rx_len to equal master->maxdevs. The resulting GENMASK() index be...

EUVD-2026-82047

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-90386 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-90386 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-91015

The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX action that deactivates its Popup Builder popups, relying only on a nonce that is publicly output to every visitor, allowing unauthenticated attackers to permanently disable any popup...

EUVD-2026-81356

The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX action that deactivates its Popup Builder popups, relying only on a nonce that is publicly output to every visitor, allowing unauthenticated attackers to permanently disable any popup...

CVE-2026-91015 Master Addons for Elementor < 3.1.9 - Unauthenticated Popup Deactivation via jltma_popup_disable_expired

The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX action that deactivates its Popup Builder popups, relying only on a nonce that is publicly output to every visitor, allowing unauthenticated attackers to permanently disable any popup...

CVE-2026-91015

The Master Addons for Elementor WordPress plugin (versions 3.0.0-3.1.8 ) is vulnerable to unauthenticated popup deactivation. The flaw exists because the plugin fails to perform proper authorization checks on the AJAX action used to deactivate its Popup Builder popups. Instead, the action relies ...