EUVD-2026-59089

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

PT-2026-72179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtd: mchp23k256 driver where chip capacity information is stored in both the Open Firmware OF match table and the SPI id table. The probe process uses the of devic...

EUVD-2026-48987

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - prevent division by zero and arithmetic underflow The Elan I2C touchpad driver queries the device for its physical dimensions and trace counts to calculate the device resolution and width. However, if the device...

PT-2026-64496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Elan I2C touchpad driver contains issues related to how it processes physical dimensions and trace counts. If the device firmware or device tree provides zero values for the x traces...

CVE-2026-64221

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...

CVE-2026-64221

The CVE-2026-64221 entry concerns the Linux kernel SPI TI-QSPI driver. The flaw is a use-after-free after DMA setup failure: during probe, the driver falls back to PIO if DMA setup fails, and the fix ensures the DMA channel pointer is cleared if buffer allocation fails to avoid passing a released...