kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

Linux Distros Unpatched Vulnerability : CVE-2026-90585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Renesas RA SCI UART driver's receive-error ISR, uartrascieriisr in drivers/serial/uartrenesasrasci.c, acknowledged the error condition only when a Zephyr...

CVE-2026-59771

Improper validation of array index in the MigTD's virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This...

CVE-2026-60020

A memory leak vulnerability exists in the MigTD virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0 . The root cause is a missing release of memory after effective lifetime (CWE-401). A system software adversary with privileged user access can perform a low-comp...

CVE-2026-60020

Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of...

EUVD-2026-121681

Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of...

CVE-2026-59771

Improper validation of array index in the MigTD's virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This...

CVE-2026-59771

The Intel(R) TDX Migration Trust Domain (MigTD) is vulnerable to a denial of service (DoS) due to improper validation of an array index in the virtio-serial driver operating within Ring 0: Hypervisor. A system software adversary with privileged user rights could exploit this via a low-complexity ...

EUVD-2026-121680

Improper validation of array index in the MigTD's virtio-serial driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This...

CVE-2026-80886

A flaw was found in the Linux kernel's msm serial driver. A race condition can occur during concurrent writes from userspace and the kernel to the console Universal Asynchronous Receiver/Transmitter UART. This happens when userspace initiates a Direct Memory Access DMA transfer while the kernel's...

CVE-2026-80737

A flaw was found in the Linux kernel's amba-pl011 serial driver. Improper synchronization during Direct Memory Access DMA teardown allows a transmit TX callback to access memory after it has been freed. This use-after-free vulnerability could lead to memory corruption and system instability...

CVE-2026-98746

A flaw was found in the Linux kernel's ma35d1 serial driver. This flaw allows a local user to cause a Denial of Service DoS through resource exhaustion. The driver fails to release clock references during probe error handling or when the serial port is removed, causing kernel resources to leak up...

kernel: USB: serial: cypress_m8: fix memory corruption with small endpoint

A flaw was found in the Linux kernel's cypressm8 USB serial driver. A malicious Universal Serial Bus USB device could report a packet size smaller than eight bytes for the interrupt-out endpoint. This can lead to memory corruption, specifically user-controlled slab corruption or a NULL-pointer...

CVE-2026-93123

A flaw was found in the Linux kernel's qcom-geni serial driver. When the uartflushbuffer function is called after a Direct Memory Access DMA transfer completes but before its completion interrupt is processed, the transmit buffer can be reset. If new data is written to the buffer before the stale...

CVE-2026-98748

A flaw was found in the Linux kernel's Broadcom serial driver. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. During device removal, an incoming interrupt can restart a timer after it has been cancelled, leading to a use-after-free...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevents a crash from occurring when the first serial port is initialized: Console: switching to mono frame buffer device 160x64 fb0: PMAG-AA frame buffer device at tc0 DECstation Z85C...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from occurring when the first serial port is initialized: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 fra...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port, and then, if the device has a clock, registers a clock notifier. If clknotifierregister fails,...