CVE-2026-89587

CVE-2026-89587 is a stack buffer overflow in the Linux kernel's ACPI Platform Firmware Runtime Update (pfr_update) driver. The query_capability() function uses memcpy to copy four firmware-supplied ACPI buffer objects (code_type, drv_type, platform_id, oem_id) into fixed-size u8[16] fields of the...

CVE-2026-74557 scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsiscsicmdrsp copies the sense data of a SCSI Response from the target-supplied data segment. The segment carries a 2-byte sense length followed by the sense bytes,...

EUVD-2026-59117

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in movedata The loopback movedata performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory...