Linux Distros Unpatched Vulnerability : CVE-2026-90282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after...

CVE-2026-90282

CVE-2026-90282 affects the QCOM QMP USB legacy PHY driver in the Linux kernel. The root cause is a NULL pointer dereference of qmp->phy when the runtime suspend callback executes in a narrow window between pm_runtime_enable() and pm_runtime_forbid(), before the PHY pointer is initialized. The ...

DEBIAN-CVE-2022-49396

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error e.g. probe deferral. Note that due to the reset controller being defined in devicetree in "lane...