CVE-2026-100079

A flaw was found in the Linux kernel's USB Type-C Connector System Software Interface UCSI driver. This vulnerability can result in a Denial of Service DoS or system instability due to improper resource cleanup during device teardown. Debug filesystem debugfs entries created during registration a...

CVE-2026-98055

A flaw was found in the Linux kernel's Intel Audio Voice Studio AVS driver. This flaw can lead to a Denial of Service DoS due to improper resource cleanup during device initialization. When probing an audio device, the driver fails to check return codes from capability queries and does not releas...

ROS-20260925-73-0172

The vulnerability of the rtl8187rxcb function in the driver file drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c of the Realtek wireless communication adapter driver for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability could allow...

ROS-20260918-73-0042

The vulnerability of the ip6flseqshow function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rprochandleresources fails in rprocattach When rproc-state = RPROCDETACHED and rprocattach is used to attach to the remote processor, if rprochandleresources returns an error, the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Resources are freed after they are unregistered. The unbind operation of the DP component iterates through the submodules to unregister them and clean up the situation. However, if the unbind occurs because the DP...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sunrpc: Fix for the cacherequest leak in cacherelease. When a reader’s file descriptor is closed while the cacherequest is still being read i.e., when rp-offset != 0, cacherelease decrements the number of readers for the request,...

CVE-2026-89572

A flaw was found in the cpufreq apple-soc driver of the Linux kernel. The applesoccpufreqinit function, responsible for adding Operating Performance Point OPP tables from firmware, does not properly remove these tables in certain failure scenarios. This improper cleanup can lead to resource...

DEBIAN-CVE-2026-89572

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup applesoccpufreqinit adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses devpmoppremovealldynamic, which is not the right cleanup helper for OPP...

CVE-2026-89527 svcrdma: Use svc_xprt_put to free listener on create failure

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svcxprtput to free listener on create failure svcrdmacreate calls kfreecmaxprt when svcrdmacreatelistenid fails. svcxprtinit has already acquired a net namespace reference via getnettrack; kfree bypasses svcxprtfree...

CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/prefix_sid.go file of the SRv6 L3 Service protocol for the border gateway GoBGP allows a attacker to cause a service failure.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the ethnl_act_module_fw_flash() function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the ethnlactmodulefwflash function in the net/ethtool/module.c module, which implements networking functions in the Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

SUSE CVE-2026-74379

In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When devdaxkmemprobe partially succeeds at least one range is mapped but a subsequent range fails requestmemregion or addmemorydrivermanaged, the probe silently...

The vulnerability of the mpc52xx_spiRemove() function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver allows a attacker to cause a service failure.

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux kernel’s SPI device driver is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-72406

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

CVE-2026-80654

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox channel is cleaned up when the rxchan is NULL due to incorrect condition...

CVE-2026-80650

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

SUSE CVE-2026-72088

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If physdisk-inreset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG...