EUVD-2026-27371

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcill: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hcill.c:587 downloadfirmware warn: 'fw' from requestfirmware not released on lines: 544. In downloadfirmware, if requestfirmware succeeds but the...

CVE-2026-43069 Bluetooth: hci_ll: Fix firmware leak on error path

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcill: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hcill.c:587 downloadfirmware warn: 'fw' from requestfirmware not released on lines: 544. In downloadfirmware, if requestfirmware succeeds but the...

CVE-2026-43069

CVE-2026-43069 concerns the Linux kernel Bluetooth stack (hci_ll). The issue arises when download_firmware() succeeds in request_firmware() but returns invalid content (no data/zero size), causing a resource leak because firmware is not released. The fix introduced is to call release_firmware() b...

CVE-2026-31748 comedi: me_daq: Fix potential overrun of firmware buffer

In the Linux kernel, the following vulnerability has been resolved: comedi: medaq: Fix potential overrun of firmware buffer me2600xilinxdownload loads the firmware that was requested by requestfirmware. It is possible for it to overrun the source buffer because it blindly trusts the file format. ...

CVE-2026-31748

CVE-2026-31748 (Linux kernel, comedi me_daq) : A firmware-overrun was fixed in the me2600_xilinx_download() path used by request_firmware(). The code trusts the firmware header and reads file_length from the first 4 bytes, then copies file_length bytes from offset 16 without verifying the data st...

CVE-2021-33270

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN800462c4 in /formAdvFirewall. This vulnerability is triggered via a crafted POST request...

CVE-2022-49881 wifi: cfg80211: fix memory leak in query_regdb_file()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in queryregdbfile In the function queryregdbfile the alpha2 parameter is duplicated using kmemdup and subsequently freed in regdbfwcb. However, requestfirmwarenowait can fail without calling...

CVE-2022-49881 wifi: cfg80211: fix memory leak in query_regdb_file()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in queryregdbfile In the function queryregdbfile the alpha2 parameter is duplicated using kmemdup and subsequently freed in regdbfwcb. However, requestfirmwarenowait can fail without calling...

CVE-2024-43900 media: xc2028: avoid use-after-free in load_firmware_cb()

In the Linux kernel, the following vulnerability has been resolved: media: xc2028: avoid use-after-free in loadfirmwarecb syzkaller reported use-after-free in loadfirmwarecb 1. The reason is because the module allocated a struct tuner in tunerprobe, and then the module initialization failed, the...

PT-2021-29174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.271 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue concerns the use of request firmware nowait instead of request firmware. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-25131

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior ...

PT-2021-25164

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue concerns the use of request firmware nowait instead of request firmware. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-29125

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior ...

PT-2021-25180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.271 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.12.9 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29144

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description The issue concerns the use of request firmware nowait instead of request firmware. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-29027

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue concerns the use of 'request firmware nowait' instead of 'request firmware'. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...