DEBIAN-CVE-2026-90119

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup sndice1712probe performs multiple initialization steps after sndcardnew, but directly returns on failures from later steps without releasing the ALSA card,...

CVE-2026-90119

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup sndice1712probe performs multiple initialization steps after sndcardnew, but directly returns on failures from later steps without releasing the ALSA card,...

CVE-2026-90084

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add...

CVE-2026-93142

CVE-2026-93142 affects the Linux kernel 's RCAR thermal driver (thermal/drivers/rcar). The root cause is an error pointer dereference of priv->zone: the code calls thermal_zone_device_enable() before verifying that thermal_zone_device_register_with_trips() succeeded, so a failed registration l...

EUVD-2026-82249

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: r8a66597: avoid double free of ep0req in probe error path If usbaddgadgetudc fails, r8a66597probe jumps to erraddudc and frees ep0req, then falls through to cleanup2 where ep0req is freed again when it is non-NULL...

EUVD-2026-82224

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However, the error path labels are out of order relative to the registration...

CVE-2026-93116 platform/x86: asus-wmi: fix resource leaks on probe failure

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However, the error path labels are out of order relative to the registration...

CVE-2026-93116

CVE-2026-93116 affects the asus-wmi platform/x86 driver in the Linux kernel . During driver initialization in asus_wmi_add(), error path labels are misordered relative to the sequential registration of subsystems. When initialization fails partway through (e.g., asus_wmi_custom_fan_curve_init() o...

EUVD-2026-82210

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1initdd allocates the shared AIP/VNIC RX support before returning. If hfi1init or hfi1registeribdevice later fails, initone tears down the device data without calling hfi1freerx...

CVE-2026-93102 RDMA/hfi1: Free RX data on late probe failure

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1initdd allocates the shared AIP/VNIC RX support before returning. If hfi1init or hfi1registeribdevice later fails, initone tears down the device data without calling hfi1freerx...

CVE-2026-93102

CVE-2026-93102 affects the RDMA/hfi1 driver in the Linux kernel. The root cause is a resource leak: hfi1_init_dd() allocates shared AIP/VNIC RX support, but if hfi1_init() or hfi1_register_ib_device() subsequently fails, init_one() tears down device data without calling hfi1_free_rx() , leaking n...

CVE-2026-93082 firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

CVE-2026-93082 firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

EUVD-2026-82193

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the functio...

CVE-2026-93082

CVE-2026-93082 affects the arm_scmi firmware driver in the Linux kernel . The vulnerable function is mailbox_chan_setup() , which acquires a primary P2A mailbox channel and then attempts to request an additional P2A receiver channel. If the secondary request fails, the function returns the error ...

EUVD-2026-82192

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

CVE-2026-92504 thermal: intel: int3400: clean up ODVP on probe failures

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int3400: clean up ODVP on probe failures evaluateodvp creates per-ODVP sysfs files before the thermal zone and later probe resources are registered. The current unwind path only calls cleanupodvp from the late sys...

CVE-2026-92504

CVE-2026-92504 is a resource-leak flaw in the Linux kernel 's Intel INT3400 thermal driver . The evaluate_odvp() function creates per-ODVP sysfs files before later probe resources are registered, but the unwind path only called cleanup_odvp() from the late sysfs failure path. Failures after evalu...

CVE-2026-90405 media: stm32: dcmi: fix some error handling bugs in probe()

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...

CVE-2026-90405 media: stm32: dcmi: fix some error handling bugs in probe()

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1 After we assign: chan = dmarequestchan&pdev-dev, "tx"; Then the error paths need to clean up before returning. The first error path does a...