CVE-2026-90280 phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pmruntimeenable and before pmruntimeforbid. In this case, a crash occurs because runtim...

CVE-2026-90249 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...

CVE-2026-90249 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...

CVE-2026-90249

This Linux kernel vulnerability affects the gp2ap002 IIO light/proximity sensor driver. The root cause is that the IIO core does not filter duplicate writes to the event enable attribute, causing write_event_config() to be invoked twice. Enabling an event twice leaks a runtime PM reference, preve...

EUVD-2026-81842

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...

CVE-2026-90212

CVE-2026-90212 affects the Linux kernel on arm64 systems that enable software PAN (CONFIG_ARM64_SW_TTBR0_PAN=y) and use EFI runtime services. The fpsimd context management code called from __efi_fpsimd_begin() can voluntarily preempt, causing the code to return to the EFI runtime service call wit...

com.squareup.wire:wire-compiler (1.0.0), com.squareup.wire:wire-gson-support (1.0.0) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.0.0)

com.squareup.wire:wire-runtime MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.0.0 - com.squareup.wire:wire-gson-support 1.0.0 Source cves:...

com.squareup.retrofit:converter-wire (>=1.2.1, <=1.2.2), com.squareup.wire:wire-compiler (1.0.1) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.0.1)

com.squareup.wire:wire-runtime MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.2.1, =1.2.2 - com.squareup.wire:wire-compiler 1.0.1 -...

com.squareup.wire:wire-compiler (1.1.0), com.squareup.wire:wire-gson-support (1.1.0) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.1.0)

com.squareup.wire:wire-runtime MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.1.0 - com.squareup.wire:wire-gson-support 1.1.0 Source cves:...

com.squareup.wire:wire-compiler (1.1.1), com.squareup.wire:wire-gson-support (1.1.1) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.1.1)

com.squareup.wire:wire-runtime MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.1.1 - com.squareup.wire:wire-gson-support 1.1.1 Source cves:...

com.squareup.retrofit:converter-wire (>=1.3.0, <=1.6.0), com.squareup.wire:wire-compiler (1.2.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.2.0)

com.squareup.wire:wire-runtime MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.3.0, =1.6.0 - com.squareup.wire:wire-compiler 1.2.0 -...

com.squareup.wire:wire-compiler (1.3.0), com.squareup.wire:wire-gson-support (1.3.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.0)

com.squareup.wire:wire-runtime MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.0 - com.squareup.wire:wire-gson-support 1.3.0 -...

com.squareup.wire:wire-compiler (1.3.1), com.squareup.wire:wire-gson-support (1.3.1) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.1)

com.squareup.wire:wire-runtime MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.1 - com.squareup.wire:wire-gson-support 1.3.1 -...

com.squareup.wire:wire-compiler (1.3.2), com.squareup.wire:wire-gson-support (1.3.2) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.2)

com.squareup.wire:wire-runtime MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.2 - com.squareup.wire:wire-gson-support 1.3.2 -...

com.squareup.wire:wire-compiler (1.3.3), com.squareup.wire:wire-gson-support (1.3.3) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.3)

com.squareup.wire:wire-runtime MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.3 - com.squareup.wire:wire-gson-support 1.3.3 -...

com.squareup.wire:wire-compiler (1.4.0), com.squareup.wire:wire-gson-support (1.4.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.4.0)

com.squareup.wire:wire-runtime MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.4.0 - com.squareup.wire:wire-gson-support 1.4.0 -...

com.squareup.wire:wire-compiler (1.5.0), com.squareup.wire:wire-gson-support (1.5.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.5.0)

com.squareup.wire:wire-runtime MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.5.0 - com.squareup.wire:wire-gson-support 1.5.0 -...

com.squareup.retrofit:converter-wire (1.6.1), com.squareup.wire:wire-compiler (1.5.1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.5.1)

com.squareup.wire:wire-runtime MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire 1.6.1 - com.squareup.wire:wire-compiler 1.5.1 -...

com.squareup.retrofit:converter-wire (>=1.7.0, <=1.9.0), com.squareup.wire:wire-compiler (1.5.2) +3 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.5.2)

com.squareup.wire:wire-runtime MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.7.0, =1.9.0 - com.squareup.wire:wire-compiler 1.5.2 -...

com.github.cloudfoundry-community:snotel (>=0.1, <=0.2), com.squareup.wire:wire-compiler (1.6.0) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.6.0)

com.squareup.wire:wire-runtime MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.1, =0.2 - com.squareup.wire:wire-compiler 1.6.0 -...