CVE-2026-89738

CVE-2026-89738 is a use-after-free vulnerability in the Linux kernel's at91_udc USB gadget driver. In polled-VBUS mode, a self-restarting timer and work-item cycle is armed during driver probe but never cancelled on teardown (driver unbind or probe failure). Because the udc struct is devm-allocat...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rtc: Check whether the rtcreadtime call was successful in rtctimerdowork. If the rtcreadtime call fails, the struct rtctime tm; structure may contain uninitialized data, or an illegal date/time reading from the RTC hardware may...

rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

...

CVE-2024-56739 rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

In the Linux kernel, the following vulnerability has been resolved: rtc: check if rtcreadtime was successful in rtctimerdowork If the rtcreadtime call fails,, the struct rtctime tm; may contain uninitialized data, or an illegal date/time read from the RTC hardware. When calling rtctmtoktime later...