EUVD-2026-86165

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.2. It stems from the BPF verifier’s incorrect inference that a register is not empty when comparing two pointers within checkcondjmpop, potentially leading to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability arises from the fact that the function vdusevalidateconfig only checks the upper bound of vq Align, without verifying that the alignment value must be a power of two and not less than VRINGUSEDALIGNSIZE. As a...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from double pointer dereferencing in TPprintk. This can lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the regnotnull function in the bpf verifier, which only determines non-NULL based on the register type. There is no limitation on unbounded offsets, resulting in a false positive when the pointer might b...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the improper handling of null values by the BPF verifier when processing the bpfrefcountacquire function for borrowing RCU kptr. This can lead to a null pointer dereferencing, as the verifier may treat...

Linux Kernel Security Vulnerabilities

Security vulnerabilities exist in Linux kernels versions from 5.4.297 to 5.5, from 5.10.231 to 5.11, from 5.15.174 to 5.16, from 6.1.120 to 6.2, from 6.6.64 to 6.7, from 6.11.11 to 6.12, from 6.12.2 to 6.13, and version 6.13. The vulnerability stems from a race condition between hciconndelsysfs a...

CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-93274

A null pointer dereference vulnerability exists in the Linux kernel within the pinctrl: bcm2835 component. The issue occurs when the devm_pinctrl_register() function fails; the bcm2835_pinctrl_probe() function incorrectly calls gpiochip_remove() before gpiochip_add_data() has registered the GPIO ...

EUVD-2026-86146

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-93273

The Linux kernel contains a vulnerability in the tps6594 regulator driver within the tps6594_regulator_probe() function. A multi-phase configuration loop fails to release node references (np, intermediate parent, and np_pmic_parent) via of_node_put(), resulting in a reference leak during each ite...

CVE-2026-93273 regulator: tps6594: Fix device node reference leaks in multiphase loop

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

CVE-2026-93273 regulator: tps6594: Fix device node reference leaks in multiphase loop

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

EUVD-2026-86145

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

CVE-2026-93263

The Linux kernel contains a vulnerability where the eswin driver fails to properly initialize stack-allocated clk_init_data structures within the eswin_clk_register_pll() and eswin_register_clkdiv() functions. Because these structures are only partially initialized, leftover stack garbage in unin...

CVE-2026-93263 clk: eswin: Zero-initialize stack-allocated clk_init_data

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-93263 clk: eswin: Zero-initialize stack-allocated clk_init_data

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

EUVD-2026-86135

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

EUVD-2026-86133

In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key validation fails. However, locksetclass uses the return value directly...