Google-Tensor-Chips

Google Tensor Chips — DarWINN NPU Access Direct-access tooling for the Google Tensor NPU DarWINN, reverse-engineered across two generations: Tensor G2 Pixel 7, codename Janeiro and Tensor G3 Pixel 8, codename Rio. Why this exists I was trying to get LLM inference running on the phone and wanted t...

CVE-2026-89590

A flaw was found in the accel/rocket driver within the Linux kernel. Incorrect error handling in the rocketjobrun function can lead to resource leaks. This occurs when the system fails to properly release references to Direct Memory Access DMA fences and Power Management PM resources during error...

CVE-2026-89590

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocketjobrun In rocketjobrun, after taking an extra fence reference for job-donefence via dmafenceget, the error paths have three bugs: - The dmafence reference held by job-donefence is...

CVE-2026-89590 accel/rocket: Fix error path handling in rocket_job_run()

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocketjobrun In rocketjobrun, after taking an extra fence reference for job-donefence via dmafenceget, the error paths have three bugs: - The dmafence reference held by job-donefence is...

CVE-2026-89590

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocketjobrun In rocketjobrun, after taking an extra fence reference for job-donefence via dmafenceget, the error paths have three bugs: - The dmafence reference held by job-donefence is...

PT-2026-90306

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocket job run In rocket job run, after taking an extra fence reference for job-done fence via dma fence get, the error paths have three bugs: - The dma fence reference held by job-done...

CVE-2026-80632

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996inittxqueues When MT76NPU and CONFIGNETMEDIATEKSOCWED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996inittxqueues will dereference a NULL WED pointer. Fix...

UBUNTU-CVE-2026-80632

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996inittxqueues When MT76NPU and CONFIGNETMEDIATEKSOCWED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996inittxqueues will dereference a NULL WED pointer. Fix...

CVE-2026-80632

CVE-2026-80632 affects the Linux kernel 's wifi mt76 driver for the mt7996 chipset. When both MT76_NPU and CONFIG_NET_MEDIATEK_SOC_WED are enabled and mt76 detects the Airoha NPU SoC , the function mt7996_init_tx_queues() dereferences a NULL WED pointer, resulting in a NULL pointer dereference (k...

CVE-2026-20786

A flaw was found in the Intel NPU Driver. This vulnerability, an out-of-bounds read, could allow a local attacker with low privileges to cause a denial of service DoS. A denial of service means the system or application becomes unavailable to legitimate users. The flaw can be exploited by an...

CVE-2026-20783

A flaw was found in the Intel NPU Driver firmware due to an improper conditions check. An unprivileged attacker with authenticated user access can exploit this vulnerability locally with low complexity and no user interaction. This can lead to a denial of service, severely impacting the...

CVE-2026-20769

A flaw was found in the Intel NPU Driver. An unprivileged software adversary with an authenticated user can exploit an improper conditions check. This vulnerability, requiring local access and no user interaction, may lead to a denial of service on the affected system. Mitigation No mitigation is...

CVE-2026-20731

A flaw was found in the Intel NPU Driver. Due to improper buffer restrictions, an unprivileged local attacker with authenticated user access could exploit this vulnerability. This could lead to a denial of service DoS condition, impacting the availability of the system. Mitigation No mitigation i...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

Linux Distros Unpatched Vulnerability : CVE-2026-72091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into...

Linux Distros Unpatched Vulnerability : CVE-2026-20731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper buffer restrictions for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software...

Linux Distros Unpatched Vulnerability : CVE-2026-20783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper conditions check in the firmware for the IntelR NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged...

Linux Distros Unpatched Vulnerability : CVE-2026-20769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software...

CVE-2026-72091

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

UBUNTU-CVE-2026-72091

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...