CVE-2026-64182 drivers/base/memory: fix memory block reference leak in poison accounting

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblknrpoisoninc and memblknrpoisonsub look up a memory block via findmemoryblockbyid, which acquires a reference to the memory block device. Both helpers...

The vulnerability of the xhci_free_virt_device() function in the drivers/usb/host/xhci-mem.c driver for USB devices in Linux kernels allows a hacker to cause a service failure.

The vulnerability of the xhcifreevirtdevice function in the drivers/usb/host/xhci-mem.c module of the Linux device driver framework is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-53336

A flaw was found in the Linux kernel's nvmem driver. This vulnerability allows a local attacker to trigger a denial of service DoS by providing a specially crafted EEPROM Electrically Erasable Programmable Read-Only Memory entry with an unknown type. This can cause the driver to enter an endless...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Memory-related issue: fslifc – fixed the leak of IO mapping during probe failures. During probe errors, the driver should unmap the IO memory. Specific reports: drivers/memory/fslifc.c: 298 – fslifcctrlprobe function warning:...

CVE-2026-43469 xprtrdma: Decrement re_receiving on the early exit paths

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement rereceiving on the early exit paths In the event that rpcrdmapostrecvs fails to create a work request due to memory allocation failure, say or otherwise exits early, we should decrement ep-rereceiving before...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the mtk-smi memory driver not properly releasing device references during general probing,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the mtk-smi memory driver not properly releasing device references during larb detection,...

CVE-2026-31743 nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy

In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmpnvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation and memcpy is wrong. It can lead to undersized DMA buffer access and possible memory corruption. use correct buffer size in dmaalloccoherent...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an improper initialization order of the freeqp object in the Irdma driver. This could lead to...

PT-2026-27713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the handling of Non-Volatile DIMM NVDIMM objects within the cxl Coherent Accelerator Interface subsystem. A race condition can occur during th...

EUVD-2025-203818

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PCIe driver’s S-EL0 address space...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-408758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-408758 advisory. In the Linux kernel, the following vulnerability has been resolved: resource: fix regionintersects vs addmemorydrivermanaged On a system with CXL memory, the resourc...

DEBIAN-CVE-2025-38072

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Fix divide error in ndlabeldatainit If a faulty CXL memory device returns a broken zero LSA size in its memory device information Identify Memory Device Opcode 4000h, CXL spec. 3.1, 8.2.9.9.1.1, a divide error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the qcomsmd driver not releasing node references in parseedge, which could lead to a reference count leak...

Vulnerability of the parse_qcomsmem_part() function in the drivers/mtd/parsers/qcomsmempart.c module – This is a memory support driver for Linux kernel, which allows an attacker to trigger a system failure.

Vulnerability of the parseqcomsmempart function in the drivers/mtd/parsers/qcomsmempart.c module – Linux kernel’s memory support drivers are vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cause system failures...

The vulnerability of the match_nvdimm_bridge() function in the drivers/cxl/core/pmem.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the matchnvdimmbridge function in the drivers/cxl/core/pmem.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Resource: Fix for regionintersects vs addmemorydrivermanaged On a system with CXL memory, the resource tree /proc/iomem related to CXL memory may look like this. 490000000-50fffffff: CXL Window 0 490000000-50fffffff: region0...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write warnings When the “storcli2 show” command is executed for eHBA-9600, the mpi3mr driver prints this warning message: memcpy: A field-spanning write size 128 was detected in the singl...

UBUNTU-CVE-2024-53869

NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure...

DEBIAN-CVE-2024-56641

In the Linux kernel, the following vulnerability has been resolved: net/smc: initialize closework early to avoid warning We encountered a warning that closework was canceled before initialization. WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 flushwork+0x19e/0x1b0 Workqueue: events...