Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies to the “lite” firmware loaded by the boot firmware. When preparing t...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: Fix leak when custom dumpsegments addition fails Free allocated minidumpregion ‘name’ in qcomaddminidumpsegments when failing before adding the region to ‘dumpsegments’. Otherwise, the ‘name’ is not tracked and ...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: remoteproc: fix OOB read via signed offset in rsctableforeachentry table-offseti is a u32 value provided by the firmware; however, it was stored as a signed int. A specially crafted offset such as 0xFFFFFFF0 results in a value of...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Be sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound...

CVE-2026-90431

A flaw was found in the Linux kernel's remoteproc component. A race condition exists between the crash handling and removal functions due to a lack of synchronization. This could allow a local attacker to trigger a use-after-free vulnerability. Successful exploitation of this flaw may lead to...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Access buffer information only when IPI is buffered In the receive callback, check whether the message is NULL to prevent a crash that could occur due to a null pointer dereference...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcomaddsysmonsubdev kfree should be called when ofirqgetbyname fails or devmrequestthreadedirq fails in qcomaddsysmonsubdev; otherwise, a memory leak will occur. Therefore, kfree is added to...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproccoredumpwrite Check count for 0, to avoid a potential underflow. Make the check the same as the one in rprocrecoverywrite...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5wcssinitmmio q6v5wcssinitmmio calls platformgetresourcebyname, which may fail and return NULL. devmioremap uses res-start as input, which could lead to a null-ptr-deref...

Astra Linux - Vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomq6v5mss: Fix some memory leaks in q6v5allocmemoryregion The devicenode pointer is returned by ofparsephandle or ofgetchildbyname with the reference count incremented. We should call ofnodeput on it when finished...

CVE-2026-90314

A flaw was found in the Linux kernel's remoteproc component. This vulnerability allows a local attacker to trigger an out-of-bounds read by providing a specially crafted offset from firmware. The issue arises because a 32-bit unsigned integer offset is incorrectly handled as a signed integer,...

ROS-20261009-73-0210

The vulnerability in the drivers/remoteproc/imxrproc.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main...

CVE-2026-93126

A flaw was found in the Linux kernel's remoteproc subsystem, specifically within the qcomq6v5adsp driver. When the adspmapcarveout function is called, it fails to properly release a device node reference. This oversight can lead to a reference leak, potentially causing resource exhaustion over ti...

CVE-2026-93272

A flaw was found in the Linux kernel's Qualcomm Wireless Connectivity Subsystem WCNSS remoteproc driver. When initializing hardware configurations that lack power domain regulators, an incorrect pointer calculation shifts past the bounds of the regulator array. A local privileged user could trigg...

CVE-2026-100079

The Linux kernel is vulnerable to a resource management issue where ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() fails to remove them, leaving them active until ucsi_destroy() is called. This can lead to conflicts, such as drivers attempting to create already existi...

PT-2026-98836

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB Type-C UCSI component where ucsi register creates per-instance debugfs entries, but ucsi unregister fails to remove them until ucsi destroy is called. This lea...

SUSE CVE-2026-93272

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomwcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from numpdvregs to numpds, which would shift the info...

DEBIAN-CVE-2026-93272

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomwcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from numpdvregs to numpds, which would shift the info...

AZL-103598 CVE-2026-93272 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomwcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from numpdvregs to numpds, which would shift the info...