CVE-2026-31650

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The vub300 driver maintains an explicit reference count for the controller and its driver data and the last reference can in theory be dropped after the driver has been unbound. This...

CVE-2026-31650 mmc: vub300: fix use-after-free on disconnect

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The vub300 driver maintains an explicit reference count for the controller and its driver data and the last reference can in theory be dropped after the driver has been unbound. This...

CVE-2026-31606

The CVE-2026-31606 issue affects the Linux kernel USB HID gadget driver. When a /dev/hidg* device is still open, unbind/bind operations can reinitialize a live cdev, which is unsafe and can crash the system. The core problem is calling cdev_init while the cdev is still in use; the fix is to alloc...

CVE-2026-31606 usb: gadget: f_hid: don't call cdev_init while cdev in use

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fhid: don't call cdevinit while cdev in use When calling unbind, then bind again, cdevinit reinitialized the cdev, even though there may still be references to it. That's the case when the /dev/hidg device is still...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the rt2x00usb driver. In this driver, the USB anchor’s lifecycle is bound to the parent device...

PT-2026-35024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rt2x00usb driver where device managed resources are tied to the parent USB device instead of the USB interface. This can lead to memory leaks when drivers are...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013510 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware...

Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-011280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011280 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port-pm on uartchangepm Unloading a hardware specific 8250 driver can...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011233 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011197)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011197 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware...

PT-2026-44323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description An issue exists in the spi: mpc52xx component where the controller is not properly deregistered before the driver unbinds...

PT-2026-47372

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1 Description A use-after-free issue exists in the topcliff-pch SPI driver. This occurs during the driver unbind process when DMA buffers...

PT-2026-44342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description A use-after-free issue exists in the Linux kernel within the spi: mpc52xx component. The state machine work is scheduled by...

PT-2026-47368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs during driver unbind in the spi: s3c64xx component. This happens because a DMA channel deallocation was incorrectly left in the remove function after th...

PT-2026-43971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lifetime bookkeeping error exists in the ucan driver within the CAN subsystem. USB drivers bind to USB interfaces, and device managed resources must have their lifetime tied to the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006825 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy exit annotation for remove function With tpd12s015remove marked...

PT-2026-37396

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2 Description A NULL pointer dereference exists in the IPVS component. When ip vs bind scheduler succeeds within ip vs add service, the local variable sched is set to NULL. If ip vs start estimator subsequently...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006578 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or...

SUSE CVE-2026-23429

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommusvaunbinddevice domain-mm-iommumm can be freed by iommudomainfree: iommudomainfree mmdrop mmdrop mmpasiddrop After iommudomainfree returns, accessing domain-mm-iommumm may dereference a freed mm...

EUVD-2026-18664

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommusvaunbinddevice domain-mm-iommumm can be freed by iommudomainfree: iommudomainfree mmdrop mmdrop mmpasiddrop After iommudomainfree returns, accessing domain-mm-iommumm may dereference a freed mm...