CVE-2026-74725

A flaw was found in the Linux kernel's enic driver. During device removal, a timing issue can occur where a transmit TX timeout schedules a reset operation after the device's memory has been freed. This leads to a use-after-free vulnerability, a type of memory corruption where the system attempts...

EUVD-2026-64774

Micrometer-instrumented Apache HttpAsyncClient 4.x or 5.x usage via MicrometerHttpClientInterceptor can leak memory unboundedly when asynchronous requests fail before receiving a response e.g. connection resets or timeouts. Tracking state for these requests remains in memory indefinitely, and...

CVE-2026-74638

A flaw was found in the Linux kernel's drm/v3d driver. This vulnerability arises from concurrent handling of scheduler timeout events across different hardware queues, which share a single global reset mechanism. When a reset occurs in one queue while another is processing a timeout, the...

CVE-2026-74653

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

EUVD-2026-64590

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74653

CVE-2026-74653 affects the Linux kernel 8250_of serial driver on NXP LPC32xx (PORT_LPC3220) hardware. The UART can latch an RX character-timeout interrupt while the RX FIFO is empty; because the interrupt is level-triggered and re-fires immediately, it causes an interrupt storm that livelocks the...

EUVD-2026-64575

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74638

CVE-2026-74638 affects the V3D DRM scheduler in the Linux kernel, used on hardware such as the Raspberry Pi 5 . The V3D GPU exposes multiple independent hardware queues (BIN, RENDER, TFU, CSD) but performs only a single global reset . When a timeout on one queue triggers a global reset while anot...

CVE-2026-74638 drm/v3d: Serialize the scheduler timeout handlers

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74638 drm/v3d: Serialize the scheduler timeout handlers

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

PT-2026-79643

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

PT-2026-79658

In the Linux kernel, the following vulnerability has been resolved: serial: 8250 of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORT LPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UART IIR RX TIMEOUT 0x0c but LSR.DR is clear. A...

PT-2026-79696

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet tear down stops both rings and frees their frame buffers before calling tb xdomain disable paths. tb ring stop zeroes the ring's descriptor base and tbnet free...

CVE-2026-70462

A flaw was found in rsync. A remote attacker can exploit a signed integer overflow vulnerability in the I/O timeout implementation by sending specially crafted messages. These messages can disable connection timeouts, causing idle or stalled connections to persist indefinitely. This leads to...

CVE-2026-74523

A flaw was found in the Linux kernel's qede network driver. When a qede Network Interface Card NIC with VXLAN/GENEVE tunnel ports experiences a transmit TX timeout, a deadlock can occur in the driver's recovery process. This deadlock prevents the system's networking control plane from responding,...

CVE-2026-77082 n8n before 1.123.69 ReDoS via Filter and Switch Node

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service ReDoS vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp and execute them synchronously on the worker thread without complexity...