PT-2026-64675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb dwc3 component where the dwc3 gadget suspend function acquires dwc-lock with interrupts disabled and subsequently calls dwc3 disconnect gadget. Because the...

Linux Distros Unpatched Vulnerability : CVE-2026-64454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: dwc3: run gadget disconnect from sleepable suspend context dwc3gadgetsuspend takes dwc-lock with IRQs disabled and then calls dwc3disconnectgadget. For asy...

PT-2026-64594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during system reboot when cpufreq suspend is called via the kernel restart to device shutdown path. Because the reboot path does not call freeze processes,...

CVE-2026-64493: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure or raw temperature, but on the read error path it returns without...

Linux Distros Unpatched Vulnerability : CVE-2026-64278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX platforms, certa...

CVE-2026-64171

A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management PM runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resourc...

Linux Distros Unpatched Vulnerability : CVE-2026-64171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pmruntime leak on mutexlock failure If tegrai2cmutexlock fails, the function...

CVE-2026-64171

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pmruntime leak on mutexlock failure If tegrai2cmutexlock fails, the function returns without calling pmruntimeput, leaking the runtime PM reference acquired by the preceding pmruntimegetsync. This prevents the...

CVE-2026-64171: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pmruntime leak on mutexlock failure If tegrai2cmutexlock fails, the function returns without calling pmruntimeput, leaking the runtime PM reference acquired by the preceding pmruntimegetsync. This prevents the...

CVE-2026-4653 Block, Suspend, Report for BuddyPress <= 3.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

CVE-2026-4653: Improper Neutralization of Input During Web Page Generation

The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

SUSE CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

The vulnerability of the amdgpu_device_suspend() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c driver code allows a hacker to cause a service failure in AMD GPU cores supporting Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the amdgpudevicesuspend function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c driver, which is part of the DRI support module for AMD GPU cores in Linux operating systems, leads to a mutual locking condition. Exploiting this vulnerability can allow an attacker to cause a...

ROS-20260702-73-0011

The vulnerability of the gserialsuspend function in the drivers/usb/gadget/function/userial.c file of the Linux device driver framework relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

EUVD-2026-40974

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

CVE-2026-53340 i2c: imx: fix clock and pinctrl state inconsistency in runtime PM

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

CVE-2026-53340

CVE-2026-53340 affects the Linux kernel i2c: imx driver. The root cause is an inconsistency between clock disable and pinctrl state switching in runtime PM: in i2c_imx_runtime_suspend(), the clock is disabled before pinctrl_sleep state is selected, so if pinctrl_pm_select_sleep_state() fails the ...