CVE-2026-98945

The Linux kernel contains a vulnerability in the HID: steam component related to the teardown sequence. The issue involves a narrow window during cleanup where callbacks could still be scheduled, resulting in a dangling pointer to the freed steam struct . The fix involves rearranging the teardown...

EUVD-2026-108919

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This...

usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown

...

CVE-2026-64583

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

PT-2026-30160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the drm/xe driver allows local privilege escalation due to insufficient protection of GGTT MMIO access. The protection mechanism using drm dev enter fails if the driver load...

DEBIAN-CVE-2022-49808

In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...

PT-2025-25986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak issue has been identified in the Linux kernel, specifically in the octeontx2-af module. The problem occurs during the teardown sequence in the FLR handler, where it retur...