251 matches found
SUSE CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
AZL-109191 CVE-2026-98834 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
DEBIAN-CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
UBUNTU-CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
CVE-2026-98834 mtd: core: avoid double-free of OTP NVMEM device
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
CVE-2026-98834 mtd: core: avoid double-free of OTP NVMEM device
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
EUVD-2026-103774
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
CVE-2026-98834
A vulnerability exists in the Linux kernel 's mtd core component related to the OTP NVMEM device . The issue is caused by a logic error where mtd_otp_nvmem_add() unregisters a user device during a factory OTP setup failure but fails to clear the mtd->otp_user_nvmem pointer. This leads to a dou...
CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
PT-2026-117053
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the mtd core. If factory OTP setup fails after the user OTP NVMEM device is registered, the mtd otp nvmem add function unregisters the user device but fails...
CVE-2026-98834: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
Linux Distros Unpatched Vulnerability : CVE-2026-98834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 5.15.111 through 5.16, 6.1.28 through 6.2, 6.2.15 through 6.3, 6.3.2 through 6.4, and 6.4. These vulnerabilities stem from the function mtdotpnvmemadd, which does not clear mtd-otpusernvmem after a user’s OTP NVMEM device is canceled,...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fixed a memory leak in nvmemregister. In nvmemsetname, memory will be allocated for nvmem-dev.kobj.name during nvmemregister. When nvmemvalidatekeepouts fails, nvmem’s memory will be freed, but no one will free the...
Astra Linux – vulnerability in linux, linux-5.10
In the Linux kernel, the following vulnerability has been resolved: nvmem: Fixed shift-out-of-bound UBSAN issue involving byte-size cells When a cell’s ‘nbits’ value is a multiple of BITSPERBYTE, the logic p &= GENMASKcell-nbits%BITSPERBYTE - 1, 0; results in undefined behavior, as nbits modulo...
Astra Linux – vulnerability in linux-5.10, linux, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered; the read operation will fail, and the device will be torn down. If another driver accesses the nvmem device...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix the issue where the nvmemdeviceput function was not called, leading to a reference leak. In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained through nvmemdevicefind was no...
ROS-20261007-73-0055
The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...