CVE-2026-93068

CVE-2026-93068 is a teardown ordering race in the Linux kernel's AMD GPU display driver (drm/amd/display). DM I2C adapters can remain visible to userspace while display manager (DM) teardown is already in progress. A concurrent i2c-dev transfer may then enter amdgpu_dm_i2c_xfer() after the backin...

CVE-2026-93056

This vulnerability affects the Linux kernel 's USB gadget f_uac1_legacy driver. The UAC1_STR_ATTRIBUTE macro defines configfs show/store handlers for the fn_play, fn_cap, and fn_cntl string options, but its store function contains an inverted null check on the kstrndup() return value. As a result...

EUVD-2026-82166

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

CVE-2026-93056 usb: gadget: f_uac1_legacy: remove broken string configfs attributes

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

CVE-2026-93056 usb: gadget: f_uac1_legacy: remove broken string configfs attributes

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

EUVD-2026-82160

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove Three issues arise when the device is removed while a tty session is still active: 1. UAF of struct ipoctal: the remove callback frees ipoctal via...

CVE-2026-93050 ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove Three issues arise when the device is removed while a tty session is still active: 1. UAF of struct ipoctal: the remove callback frees ipoctal via...

CVE-2026-93050

CVE-2026-93050 affects the Linux kernel in the ipack/ipoctal driver. Three distinct memory-safety issues occur when an iPack device is removed while a tty session is still active: (1) a use-after-free of struct ipoctal because the remove callback frees it via kfree() while tty operations may stil...

CVE-2026-93050 ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove Three issues arise when the device is removed while a tty session is still active: 1. UAF of struct ipoctal: the remove callback frees ipoctal via...

CVE-2026-93038

This Linux kernel vulnerability affects the iio: dac: ad5686 driver. The root cause is a missing NULL check on the chip_info pointer (match data). When a user binds the driver using driver_override via sysfs with a device name not present in the id_table or of_match_table, the match data resolves...

CVE-2026-93038 iio: dac: ad5686: missing NULL check on match data

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chipinfo pointer is not NULL. If a user binds the driver using driveroverride via sysfs with a device name not present in the idtable or ofmatchtable, match data will...

CVE-2026-93038 iio: dac: ad5686: missing NULL check on match data

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chipinfo pointer is not NULL. If a user binds the driver using driveroverride via sysfs with a device name not present in the idtable or ofmatchtable, match data will...

EUVD-2026-82148

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chipinfo pointer is not NULL. If a user binds the driver using driveroverride via sysfs with a device name not present in the idtable or ofmatchtable, match data will...

CVE-2026-92500

This CVE affects the Linux kernel ext4 filesystem . A race condition exists between write_begin and write_end handlers: a concurrent thread (such as ext4_page_mkwrite) can convert inline data to an extent during this window, causing the write_end handlers to fall through to extent-based logic wit...

CVE-2026-92500 ext4: use fsdata to track inline data write state and fix race

In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write state and fix race Instead of checking the live inode state ext4hasinlinedatainode and ext4testinodestateinode, EXT4STATEMAYINLINEDATA in the writeend handlers, use the fsdata parameter...

CVE-2026-92500 ext4: use fsdata to track inline data write state and fix race

In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write state and fix race Instead of checking the live inode state ext4hasinlinedatainode and ext4testinodestateinode, EXT4STATEMAYINLINEDATA in the writeend handlers, use the fsdata parameter...

EUVD-2026-82121

In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write state and fix race Instead of checking the live inode state ext4hasinlinedatainode and ext4testinodestateinode, EXT4STATEMAYINLINEDATA in the writeend handlers, use the fsdata parameter...

CVE-2026-92493

In the Linux kernel , the amd_pstate_ut module (part of the cpufreq subsystem) causes a kernel NULL pointer dereference when loaded via modprobe on a non-AMD platform (e.g., Intel Xeon). The crash occurs at amd_pstate_ut_check_perf+0x141/0x280 due to a dereference of a NULL pointer at address 0x0...

CVE-2026-92493 cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active The crash issue may occur when modprobe amdpstateut on intel platform. amdpstateut: 1 amdpstateutacpicpcvalid success! amdpstateut: 2 amdpstateutcheckenabled...

EUVD-2026-82114

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active The crash issue may occur when modprobe amdpstateut on intel platform. amdpstateut: 1 amdpstateutacpicpcvalid success! amdpstateut: 2 amdpstateutcheckenabled...