CVE-2026-97538

The Linux kernel contains a vulnerability in the asus_rog_ryujin hwmon driver. The function rog_ryujin_raw_event() fails to verify the presence of response headers and payload fields in received reports. This allows a short report to cause the driver to consume uninitialized bytes from the HID tr...

CVE-2026-97538 hwmon: (asus_rog_ryujin) Validate HID report lengths

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

EUVD-2026-86846

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

CVE-2026-97905

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the sibling relatedcpus and realcpus masks. With CONFIGCPUMASKOFFSTACK=y...

Linux Distros Unpatched Vulnerability : CVE-2026-97905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the...

CVE-2026-97538: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

CVE-2026-97904

In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreqpolicyalloc initializes policy-rwsem after kobjectinitandadd has created the policy sysfs directory and its default attributes. A sysfs access can therefore reach a...

CVE-2026-97905: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the sibling relatedcpus and realcpus masks. With CONFIGCPUMASKOFFSTACK=y...

CVE-2026-97904: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreqpolicyalloc initializes policy-rwsem after kobjectinitandadd has created the policy sysfs directory and its default attributes. A sysfs access can therefore reach a...

CVE-2026-97904: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreqpolicyalloc initializes policy-rwsem after kobjectinitandadd has created the policy sysfs directory and its default attributes. A sysfs access can therefore reach a...

CVE-2026-97538

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

Linux Distros Unpatched Vulnerability : CVE-2026-97538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in th...

Linux Distros Unpatched Vulnerability : CVE-2026-93215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cdx: Fix double free when sysfs file creation fails In cdxcreateresattr, if sysfscreatebinfile fails, the code frees resattr but doesn't set cdxdev-resattrnum t...

CVE-2026-97905: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreqpolicyalloc allocates policy-cpus with alloccpumaskvar, i.e. without GFPZERO, unlike the sibling relatedcpus and realcpus masks. With CONFIGCPUMASKOFFSTACK=y...

Linux Distros Unpatched Vulnerability : CVE-2026-97904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: initialize policy rwsem before sysfs publication cpufreqpolicyalloc initializes policy-rwsem after kobjectinitandadd has created the policy sysfs...

PT-2026-98819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the EDAC/device sysfs component where the poll msec sysfs store file utilizes the simple strtoul function. Because simple strtoul accepts an unsigned long while the...

PT-2026-98478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The rog ryujin raw event function in the asus rog ryujin hardware monitoring hwmon driver parses response headers and payload fields without verifying their presence in the received...

PT-2026-98568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the cpufreq policy alloc function initializes the policy-rwsem semaphore after the kobject init and add function has already created the policy sysfs directory and...

PT-2026-98569

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpufreq policy alloc function where the policy-cpus mask is allocated using alloc cpumask var without the GFP ZERO flag. When CONFIG CPUMASK OFFSTACK=y is enabled,...

PT-2026-98639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth subsystem between hci conn del sysfs and concurrent child device unregistration, such as when bnep session calls unregister netdev. This occurs...