CVE-2026-90233: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

PT-2026-94467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA component where the snd ice1712 probe function fails to release the ALSA card when initialization steps following snd card new encounter an error. This failur...

PT-2026-94679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Multiple issues exist within the hid-asus driver. These include an unchecked size in the asus raw event function, an unclean teardown of asus probe upon failure, and a possible...

PT-2026-94581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvme-pci component when a probe failure happens after the admin tag set is allocated. The per-NUMA-node descriptor DMA pools, which are created lazily via the...

PT-2026-94776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where the error IRQ is requested before the cmdqv-vintfs array is allocated and cmdqv-num vintfs is set. If a CMDQV remains enabled...

PT-2026-94589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IOMMU VT-d component where the intel pasid setup sm context function fails to properly tear down scalable-mode context entries during a probe failure. When pci for...

CVE-2026-90405: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

PT-2026-94910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the san probe function when installing the GSBUS address space handler. This happens because the function dereferences the result of ACPI COMPANION...

PT-2026-94911

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mlxbf-pmc driver when it is force-bound to a device that lacks an ACPI companion object. This happens because the mlxbf pmc probe function passes...

PT-2026-94913

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the USB subsystem. This occurs when a probe operation runs concurrently with the removal of dynamic IDs. Because dynamic IDs are only guaranteed to b...

PT-2026-94954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sa2ul crypto component where the sa ul probe function calls sa init mem to create a DMA Direct Memory Access pool for security context buffers but fails to check t...

PT-2026-94914

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16 Description An issue exists in the aspeed udc gadget driver where the ast udc probe function allocates a coherent DMA Direct Memory Access buffer to serve as the backing store for endpoint buffers. Because t...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

CVE-2026-93142: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/rcar: Fix error checking in probe This code accidentally calls thermalzonedeviceenable before checking whether thermalzonedeviceregisterwithtrips failed. Move the call until later to avoid an error pointer...

PT-2026-94775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where devm krealloc is used to expand the smmu variable into a larger tegra241 cmdqv structure. This process frees the original smmu...

PT-2026-94849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad525x dpot driver where the ad dpot probe function manually creates per-RDAC sysfs files. This implementation requires the probe function to handle the rollback o...

PT-2026-94873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dax/fsdev component where the fsdev dax probe function sets pgmap-ops to &fsdev pagemap ops and pgmap-owner to dev dax without providing a mechanism to clear them...

PT-2026-94700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the mt7915 wifi driver when a probe IRQ failure happens. The hif2 reference obtained by the mt7915 pci init hif2 function is only released on error paths that...

PT-2026-94745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom SCM driver during the probe process. In qcom scm probe, the function devm request threaded irq is called before the scm variable is publishe...

PT-2026-94752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cros ec debugfs probe function where the notifier panic is registered with the EC panic notifier chain, but the remove path fails to unregister it before tearing...