CVE-2026-52977

CVE-2026-52977 affects the Linux kernel futex subsystem, describing a race between wait-requeue-pi (task A) and requeue-PI (task B) that can cause a live lock on UP systems when a signal/timeout wakeup occurs. The race involves futex_wait_requeue_pi() -> futex_setup_timer() -> futex_do_wait...

CVE-2025-39938 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails e.g. ADSP rejects due to incorrect audioreach topology, the graph is closed and "daidata-graphdai-id" is...

PT-2025-38169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-ptr-deref bug exists in the buffer prepare function within the cx88 driver. This issue occurs when the cx88 risc buffer function call fails, resulting in an empty buffer and a...

SUSE CVE-2025-38401

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdcpreparedata fails to map the DMA region, the request is not prepared for data receiving, but msdcstartdata proceeds the DMA with previous setting. Since this will lead...