1215 matches found
CVE-2026-97500 wifi: rtw89: phy: check length before parsing PHY status IE
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...
EUVD-2026-86098
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...
CVE-2026-97500
The Linux kernel contains a vulnerability in the rtw89 wifi driver. The phy component fails to validate the length of the PHY status IE reported by hardware before parsing, which could allow the parser to access out of range memory. The issue has been resolved in the kernel via commits providing ...
EUVD-2026-86148
In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount = 1, requiring the consumer to disable it before release. The devm...
CVE-2026-93276
A vulnerability exists in the Linux kernel within the phy: renesas: phy-rcar-gen3-usb2 component. The issue stems from incorrect devm action registration for the disabled VBUS regulator. Specifically, devm_regulator_get_exclusive() initializes the regulator with an enable_count of 1, but the syst...
CVE-2026-93276 phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount = 1, requiring the consumer to disable it before release. The devm...
CVE-2026-93276 phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount = 1, requiring the consumer to disable it before release. The devm...
PT-2026-98119
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the parser fails to verify the length of the PHY status Information Element IE before processing. Because hardware may report a PHY status ...
CVE-2026-97500: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...
CVE-2026-93276: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount = 1, requiring the consumer to disable it before release. The devm...
PT-2026-97892
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the fsl-imx8mq-usb PHY driver. If the probe process fails after the imx95 usb phy get tca function succeeds, the typec switch is not properly released because t...
PT-2026-104885
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...
PT-2026-97963
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the phy-rcar-gen3-usb2 component where the devm disable action for the VBUS regulator was only registered if the caller explicitly requested enablement. Because devm...
CVE-2026-97500
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...
CVE-2026-93276
In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount = 1, requiring the consumer to disable it before release. The devm...
Linux Distros Unpatched Vulnerability : CVE-2026-93276
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount ...
SUSE CVE-2026-90281
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...
SUSE CVE-2026-90287
In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in spuphyinit Fix the error paths of spuphyinit to undo exactly what each stage did: return directly if clkprepareenable fails, release only the clock if resetcontroldeassert fails, and jump to...
SUSE CVE-2026-90288
In the Linux kernel, the following vulnerability has been resolved: phy: renesas: rcar-gen2: Fix double ofnodeput on phy creation failure foreachchildofnodescoped releases the node reference on scope exit, so the explicit ofnodeputnp in the devmphycreate error path drops it twice. Drop the...
Linux Distros Unpatched Vulnerability : CVE-2026-90287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: sunplus: fix error handling in spuphyinit Fix the error paths of spuphyinit to undo exactly what each stage did: return directly if clkprepareenable fails,...