EUVD-2026-59444

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as "1 rqwqeshift" based on the user-provided rqwqeshift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shi...

CVE-2026-74297

The CVE-2026-74297 entry details a Linux kernel vulnerability in the RDMA/mlx5 path relating to RQ WQE size calculation. The flaw arises in set_rq_size(), which computes the RQ WQE size as 1 < 32; shifts of 32 are accepted and a shift of 31 can overflow a signed integer, causing undefined beha...

CVE-2026-74297 RDMA/mlx5: Fix undefined shift of user RQ WQE size

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as "1 rqwqeshift" based on the user-provided rqwqeshift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shi...

CVE-2026-74297 RDMA/mlx5: Fix undefined shift of user RQ WQE size

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as "1 rqwqeshift" based on the user-provided rqwqeshift, which is only checked to be greater than 32, so shifts of 32 are still accepted. A shi...

CVE-2026-74295 ASoC: codecs: hdac_hdmi: Validate written enum value

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling sndsocdapmputenumdouble, which validates that the value is within the enum item range. ...

CVE-2026-74294 ASoC: meson: aiu: Validate written enum values

In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the written enum value with sndsocenumitemtoval before checking whether the value is valid for the enumeration. Reject...

CVE-2026-74294

The CVE-2026-74294 issue affects the Linux kernel ASoC meson AIU: the AIU HDMI and internal codec mux put callbacks could use an out-of-range enum value when calling snd_soc_enum_item_to_val() before validating the enumeration. The vulnerability has been resolved by rejecting out-of-range values ...

CVE-2026-74293

In the Linux kernel ASoC subsystem for Freescale (fsl) audio mixer, CVE-2026-74293 concerns fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src(). These callbacks convert a user-supplied enum item to a value with snd_soc_enum_item_to_val() before validating it against the enum’s item count, w...

EUVD-2026-59439

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0 before checking whether item0 is within the enum item range. The existing check therefore happens too late to prevent an out-of-rang...

CVE-2026-74291 ASoC: topology: Check PCM and DAI name strings before use

In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser paths validate these fields with bounded strnlen checks before using them...

CVE-2026-74282

In the Linux kernel vulnerability CVE-2026-74282, the TIPC stack allows an oversized CONN_ACK to cause snt_unacked to underflow. The root cause is tipc_sk_conn_proto_rcv() subtracting the peer-supplied ack count from an unsigned 16-bit snt_unacked without ensuring it does not exceed the outstandi...

CVE-2026-74276 spi: xilinx: use FIFO occupancy register to determine buffer size

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-74276

Summary : CVE-2026-74276 documents a Linux kernel SPI/Xilinx driver issue where the TX FIFO size was miscomputed due to querying FULL and relying on the TX FIFO to reflect the actual buffer, ignoring the shift register. The result can be an over-read (example: 17 bytes for a 16-byte FIFO) leading...

CVE-2026-74277 iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path

In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path In iommudmamapsg, when handling PCI P2PDMA cases, the DMA length of the current scatterlist segment s is incorrectly assigned from the head entry sg-length...

EUVD-2026-59423

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-74276 spi: xilinx: use FIFO occupancy register to determine buffer size

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

EUVD-2026-59418

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...

CVE-2026-74271

CVE-2026-74271 affects the Linux kernel’s power supply core. If the device tree property power-supplies has multiple values, accessing psy->supplied_from[i-1] in __power_supply_populate_supplied_from can overrun the supplied_from array. The patch fixes supplied_from allocations to prevent the ...

CVE-2026-74271 power: supply: core: fix supplied_from allocations

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...

CVE-2026-74271 power: supply: core: fix supplied_from allocations

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix suppliedfrom allocations If dts property power-supplies has multiple values, then accessing to psy-suppliedfromi-1 in powersupplypopulatesuppliedfrom will overrun suppliedfrom array...