EUVD-2026-55472

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...

CVE-2026-68371

The CVE concerns the Linux kernel USB MUSB OMAP2430 driver. In omap2430_probe(), pdev->dev.of_node is stored in a local np variable as a borrowed pointer and the code later calls of_node_put(np). This drops a reference owned by the platform device, potentially leaving pdev->dev.of_node with...

EUVD-2026-55462

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-psu Stop device IO before calling hidhwstop hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiostart withi...

CVE-2026-68361

The CVE-2026-68361 entry describes a race in the Linux kernel hwmon Corsair PSU driver where hid_hw_stop() does not stop device IO, allowing a use-after-free between hid_input_report() and the completion after hid_device_io_start() in corsairpsu_probe(). This can occur if probe fails after IO sta...

CVE-2026-68360

The CVE-2026-68360 issue affects the Linux kernel hwmon Corsair C-Pro driver. It describes a race where calling hid_hw_stop() does not stop device IO, creating a race between hid_input_report() and the code after hid_device_io_start() in probe. If probe fails after IO start, this can lead to a us...

EUVD-2026-55461

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68360 hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68359 hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiosta...

EUVD-2026-55459

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-kraken3 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68358

The CVE details a Linux kernel hwmon issue for nzxt-kraken3 where calling hid_hw_stop() does not halt device I/O, creating a race between hid_input_report() and the post-io-start path in the driver probe. If probe fails after io-start has begun, this can lead to a use-after-free condition. The re...

EUVD-2026-55457

In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdtfreq as a divisor directly in...

CVE-2026-68356 watchdog: airoha: Prevent division by zero when clock frequency is zero

In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdtfreq as a divisor directly in...

CVE-2026-68356

The CVE applies to the Linux kernel watchdog driver for the Airoha clock, where clk_get_rate() can return 0 if the clock is unmanaged or misconfigured. The driver uses wdt_freq as a divisor in airoha_wdt_probe() (to compute max_timeout) and in airoha_wdt_get_timeleft() (to compute remaining time)...

CVE-2026-68344

The CVE concerns the Linux kernel USB ATM driver (ueagle-atm). A pre-/post-firmware descriptor mismatch in uea_probe() vs uea_disconnect() allows a crafted device to cause an out-of-bounds access when tracing interface data, due to incorrect handling of interface data (struct completion vs struct...

CVE-2026-68327 wan: wanxl: Only reset hardware after BAR mapping

In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxlpciinitone stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxlpciremoveone, including failur...

EUVD-2026-55428

In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxlpciinitone stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxlpciremoveone, including failur...

EUVD-2026-55322

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...

CVE-2026-68221 media: nuvoton: npcm-video: fix memory leaks in probe and remove

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...

CVE-2026-68221 media: nuvoton: npcm-video: fix memory leaks in probe and remove

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...

CVE-2026-68221

The CVE-2026-68221 entry concerns the Linux kernel component media: nuvoton: npcm-video. The issue is memory leaks in npc m_video_probe() where the structure allocated with kzalloc_obj() is not freed on probe error paths or in npcm_video_remove(), leaking on failed probes and normal unbind. It al...