CVE-2026-80966: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This...

PT-2026-96514

In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This...

CVE-2026-89457: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences device-private, either directly or through the DASDDEFINEATTR macro. Duri...

CVE-2026-89472: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

PT-2026-90188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the charger-manager component of the power supply subsystem. The problem occurs because charger manager remove and the err reg extcon probe error path...

PT-2026-96450

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid sensor custom add attributes creates one sysfs group for each custom sensor field. If sysfs create group fails after some groups have already been created, the...

PT-2026-90438

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the pci write legacy io function. The issue occurs because the function unconditionally loads 4 bytes from the kernfs write buffer, regardless of whether...

PT-2026-96498

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk store and kek store sk store and kek store strip a trailing newline from the sysfs write before allocating the key buffer: length = count; if buflength - 1 == ' ' length--; bioscf...

PT-2026-90144

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A heap out-of-bounds read exists in the hp-bioscfg module. The functions sk store and kek store strip a trailing newline from a sysfs write to determine the length for buffer allocation via...

PT-2026-90094

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description The virmidi driver in the ALSA subsystem fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devic...

PT-2026-90099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mpu401 driver fails to validate the devptr-id value during the probe process. While devices created by the driver at module probe time are handled correctly, devices bound manually v...

PT-2026-90095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The serial-u16550 driver fails to validate the devptr-id value during the probe process. When a device is bound manually via the sysfs interface, this value can be -1, leading to...

PT-2026-96493

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

CVE-2026-80969: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

PT-2026-96409

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences device-private, either directly or through the DASD DEFINE ATTR macro...

PT-2026-90342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid sensor custom add attributes function where the system fails to clean up sysfs groups if sysfs create group fails after some groups have already been created...

PT-2026-96519

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

CVE-2026-80964: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

PT-2026-90168

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msm iommu probe function where the IOMMU object is added to qcom iommu devices before the sysfs device is added and registered with the IOMMU core. If iommu device...

PT-2026-90173

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description Several sysfs show/store handlers call a discipline callback that dereferences the device-private variable, either directly or through the DASD DEFINE ATTR macro. During the execution of the...