CVE-2026-43204 ASoC: qcom: q6asm: drop DSP responses for closed data streams

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit a354f030dbce "ASoC: qcom: q6asm: handle the responses after closing"' attempted to ignore DSP responses arriving after a stream had been closed. However, those...

The vulnerability of the qcom_cpufreq_probe() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file of the Linux kernel’s CPU frequency scaling driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcomcpufreqprobe function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file, a driver for scaling CPU frequency in the Linux operating system, is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-31587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: qcom: q6apm: move component registration to unmanaged version q6apm component registers dais dynamically from ASoC toplology, which are allocated using...

EUVD-2026-25480

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: move component registration to unmanaged version q6apm component registers dais dynamically from ASoC toplology, which are allocated using device managed version apis. Allocating both component and dynamic dais...

CVE-2026-31587

Summary (based on provided sources): CVE-2026-31587 affects the Linux kernel ASoC qcom q6apm component. The issue arises when the q6apm registers DAIs dynamically from ASoC topology using device-managed APIs for both the component and the DAIs, which can lead to an incorrect free ordering and a u...

PT-2026-34939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC qcom q6apm component where dais are registered dynamically from ASoC topology using device managed APIs. When both the component and dynamic dais use managed...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013641 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013621 advisory. In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcomaddsysmonsubdev The kfree should be called when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013848 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit oficcget alloc resources for path...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013717 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcomsmsmprobe There are two refcount leak bugs in...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010830 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3qcomprobe allocates memory for resource...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006978 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table arrays are...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011276 advisory. In the Linux kernel before 5.17, an error path in dwc3qcomacpiregistercore in drivers/usb/dwc3/dwc3-qcom.c lacks certain platformdeviceput and kfree calls. Tenable h...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006794 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table arrays are...

ROS-20260211-73-0002

A vulnerability in the irq-qcom-mpm.c component of the Linux kernel is related to incorrect buffer size calculation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-71193

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...

UBUNTU-CVE-2025-71193

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...

CVE-2025-71193

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...

CVE-2025-71193

The CVE-2025-71193 family (Linux kernel: phy: qcom-qusb2) describes a NULL pointer dereference during early suspend caused by enabling runtime PM before the QPHY driver data is attached. This creates a window where suspend callbacks may run with invalid driver data, leading to sporadic boot crash...

EUVD-2025-206805

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...