CVE-2026-80938 wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615suspend acquired the mt76 mutex and then called canceldelayedworksync on macwork. mt7615macwork acquires the same mutex via mt7615mutexacquire at the top o...

CVE-2026-80938

A deadlock vulnerability was identified in the Linux kernel's mt7615 WiFi driver (mt76 subsystem). During suspend, mt7615_suspend() acquired the mt76 mutex before calling cancel_delayed_work_sync() on mac_work, while the worker itself acquires the same mutex—causing a deadlock if the work was alr...

CVE-2026-89461: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040work requeues itself after every poll. canceldelayedwork only cancels a pending instance and does not wait for a callback that is already running. If syste...

PT-2026-90177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during system suspend in the fuel gauge driver. The function max17040 work requeues itself after every poll, but the use of cancel delayed work only cancels pendi...

PT-2026-96436

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv suspend and nv resume walk the non-PCI configuration space with for i = 0; i register size/sizeofu32; i++ which runs one iteration too many. saved config spa...

PT-2026-90312

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the forcedeth driver when saving and restoring non-PCI configuration space. The functions nv suspend and nv resume use a loop that executes one iteration to...

PT-2026-90068

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A deadlock occurs in the mt7615 wireless driver during the suspend process. The mt7615 suspend function acquires the mt76 mutex and subsequently calls cancel delayed work sync on mac work...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107269 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed...

SUSE CVE-2026-80762

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053220 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-msm: pervent access to suspended controller Generic sdhci code registers LED device an...

AZL-99486 CVE-2026-80762 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

CVE-2026-80762

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

CVE-2026-80762

CVE-2026-80762 is a use-after-free in the Linux kernel Bluetooth HCI subsystem (hci_sync). The function hci_update_event_filter_sync() walks the device's accept list while issuing synchronous HCI commands per remote-wakeup device. The suspend path holds hdev->req_lock, but accept-list mutation...

CVE-2026-80762 Bluetooth: hci_sync: Fix accept list UAF during suspend

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

CVE-2026-80762

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

CVE-2026-80762 Bluetooth: hci_sync: Fix accept list UAF during suspend

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

EUVD-2026-71405

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

PT-2026-85657

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcp init notify used mixer-urb, which snd usb mixer status create allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a...

PT-2026-91317

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Fix accept list UAF during suspend hci update event filter sync walks hdev-accept list while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-req lock, but...

PT-2026-85706

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usb audio resume jumps to err out when snd usb pcm resume or snd usb mixer resume fails. The error path...