UBUNTU-CVE-2026-97480

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...

CVE-2026-97480

A vulnerability exists in the Linux kernel within the tty serial 8250 driver. The function serial8250_register_8250_port() fails to ensure that uart->port.dev is non-NULL when both the existing uart slot and the new up structure have NULL ->dev pointers. This leads to a NULL pointer derefer...

EUVD-2026-86078

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...

CVE-2026-97480 tty: serial: 8250: protect against NULL uart->port.dev in register

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...

CVE-2026-97480 tty: serial: 8250: protect against NULL uart->port.dev in register

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...

CVE-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

ROS-20260923-73-0082

The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-84512

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an undocumented mfc...

CVE-2026-95511

Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups lpadmin, which is an opt-in cupsd admin role granted by a superuser. No privilege boundary is crossed...

CVE-2026-95511

...

CVE-2026-95511

...

CVE-2026-95511

This CVE ID is rejected and does not represent an active vulnerability entry.

CVE-2026-95511

A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure a printer that uses a privileged serial backend. The CUPS scheduler does not restrict the path component of non-file device URIs, ...

PT-2026-96687

Name of the Vulnerable Software and Affected Versions CUPS and cups-filters affected versions not specified Description A privilege escalation issue exists in CUPS when used with the cups-filters serial backend. A local user with lpadmin group membership can configure a printer using a privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-90336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If...

CVE-2026-90337

In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serialcoreaddoneport allocates uport-ttygroups after uartconfigureport, which may register the console. If the allocation fails, the driver unwinds the po...

DEBIAN-CVE-2026-90337

In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serialcoreaddoneport allocates uport-ttygroups after uartconfigureport, which may register the console. If the allocation fails, the driver unwinds the po...

DEBIAN-CVE-2026-90336

In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If ttyregisterdriver fails, drv-ttydriver also retains a pointer after its...

CVE-2026-90336

In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If ttyregisterdriver fails, drv-ttydriver also retains a pointer after its...

AZL-102156 CVE-2026-90336 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If ttyregisterdriver fails, drv-ttydriver also retains a pointer after its...