PT-2026-121895

In the Linux kernel, the following vulnerability has been resolved: arm64: io: Reject non-user protection in ioremap prot Mapping a stack-top page via /dev/mem with PROT NONE and then reading that process's /proc//cmdline triggers a spurious WARN in ioremap prot through generic access phys:...

CLSA-2026-1792174065 libinput: Fix of CVE-2026-50292

CVE-2026-50292: sanitize phys sysattr to prevent udev property injection...

CLSA-2026-1792170117 libinput: Fix of CVE-2026-50292

CVE-2026-50292: sanitize phys sysattr to prevent udev property injection...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: Also search for ‘phys’ handle. When passing ‘phys’ in the device tree to describe the USB PHY handle which is the recommended approach according to Documentation/devicetree/bindings/usb/ci-hdrc-usb2.txt,...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VMPAT handling in COW mappings PAT handling fails to perform correctly in COW mappings: the first PTE or, in fact, all PTEs can be replaced during write faults to point to anonymous folios. Reliably retrieving the...

CVE-2026-98242 dma-buf: Fix silent overflow for phys vec to sgt

In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that assigns the total linked IOVA which is greater than 4G to mappedlen...

PT-2026-106571

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An integer overflow occurs in the dma-buf component when the MMIO size exceeds 4G and peer-to-peer DMA is routed through the host bridge. The system assigns the total linked IOVA to the...

CVE-2026-98242: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that assigns the total linked IOVA which is greater than 4G to mappedlen...

CentOS Linux 7 [TuxCare] Security Update: libinput / libinput-devel (CENTOS7:CLSA-2026:1783709526)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783709526 advisory. - In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

PT-2026-98533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the iova to phys function when using a 5-level translation table via ZPCI TABLE TYPE RFX. This happens because the get rto from iova function fails t...

CVE-2026-90374

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate RX bandidx before dereferencing phys bandidx comes from a 2-bit descriptor field 0-3 and was used directly to index dev-mt76.phys size MTMAXBAND == 3 and dereference the result. A corrupt or reserved...

DEBIAN-CVE-2026-90374

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate RX bandidx before dereferencing phys bandidx comes from a 2-bit descriptor field 0-3 and was used directly to index dev-mt76.phys size MTMAXBAND == 3 and dereference the result. A corrupt or reserved...

CVE-2026-90374

CVE-2026-90374 affects the mt76 mt7996 Wi-Fi driver in the Linux kernel. The root cause is an out-of-bounds array access : the band_idx value, sourced from a 2-bit descriptor field (range 0–3), was used to index dev->mt76.phys[] (size __MT_MAX_BAND == 3) without validation. A corrupt or reserv...

EulerOS 2.0 SP15 : libinput (EulerOS-SA-2026-3808)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the RX bandidx from the 2-bit descriptor field is not verified before being directly used as an index for dev-mt76.phys, resulting in dereferencing of the result. This may lead to out-of-bounds indexing or...

EulerOS 2.0 SP12 : libinput (EulerOS-SA-2026-3276)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100107 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so...

EulerOS 2.0 SP11 : libinput (EulerOS-SA-2026-3076)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

EulerOS 2.0 SP11 : libinput (EulerOS-SA-2026-3131)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

EulerOS 2.0 SP13 : libinput (EulerOS-SA-2026-2975)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...