EUVD-2026-86110

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

CVE-2026-97512

The Linux kernel contains a vulnerability in the spi-qcom-qspi driver due to incomplete error handling in runtime PM functions. If an operation fails during suspend or resume , resources may remain in inconsistent states, potentially causing clock or power imbalances and brownout risks . The fix ...

CVE-2026-97407 ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

CVE-2026-97407

The Linux kernel contains a vulnerability in the ASoC: rockchip: rockchip_pdm driver. Specifically, the rockchip_pdm_set_fmt() function calls pm_runtime_get_sync() but fails to check its return value. If the runtime resume operation fails, the function continues to access hardware registers while...

CVE-2026-97512: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

CVE-2026-97407

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

CVE-2026-97512

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

Linux Distros Unpatched Vulnerability : CVE-2026-97512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an...

SUSE CVE-2026-89934

In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216agetlux acquires a runtime PM reference by calling ltrf216asetpowerstatedata, true. However, if ltrf216areaddata fails, the function returns immediately...

Linux Distros Unpatched Vulnerability : CVE-2026-90249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing...

Linux Distros Unpatched Vulnerability : CVE-2026-93169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: zynqmpdma: fix race between runtime PM and device removal In zynqmpdmaremove, runtime PM was disabled only after checking state and doing a manual...

Linux Distros Unpatched Vulnerability : CVE-2026-93184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: fslaudmix: rework runtime PM handling in probe After pmruntimeenable the AUDMIX block is powered off and stays suspended until the first runtime resume...

CVE-2026-93184

In the Linux kernel, the following vulnerability has been resolved: ASoC: fslaudmix: rework runtime PM handling in probe After pmruntimeenable the AUDMIX block is powered off and stays suspended until the first runtime resume. Register writes issued between probe and the first resume e.g. from DA...

DEBIAN-CVE-2026-93184

In the Linux kernel, the following vulnerability has been resolved: ASoC: fslaudmix: rework runtime PM handling in probe After pmruntimeenable the AUDMIX block is powered off and stays suspended until the first runtime resume. Register writes issued between probe and the first resume e.g. from DA...

CVE-2026-93169

In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmpdma: fix race between runtime PM and device removal In zynqmpdmaremove, runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind rmmod path...

DEBIAN-CVE-2026-93169

In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmpdma: fix race between runtime PM and device removal In zynqmpdmaremove, runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind rmmod path...

DEBIAN-CVE-2026-90406

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...

AZL-102404 CVE-2026-90281 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...

CVE-2026-90249

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...

AZL-102702 CVE-2026-90249 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...