24938 matches found
CVE-2026-98668
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. iiopushtobufferswithtsunaligned leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled...
CVE-2026-98674
In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...
CVE-2026-98667
In the Linux kernel, the following vulnerability has been resolved: iio: frequency: adf4377: Fully initialize clkinitdata and clkparentdata The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to...
CVE-2026-98584
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...
CVE-2026-98760
The Linux kernel contains a vulnerability in the usb: typec: tipd component where the tps6598x_connect() function passes a stack-allocated typec_partner_desc to typec_register_partner() without full initialization. Specifically, only usb_pd, accessory, and identity fields are set, leaving other f...
CVE-2026-98760 usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after initializing only usbpd, accessory and identity. typecregisterpartner...
EUVD-2026-103845
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after initializing only usbpd, accessory and identity. typecregisterpartner...
EUVD-2026-103829
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...
CVE-2026-98744
In the Linux kernel , a vulnerability exists within the ASoC: codecs: max98363 driver. The stream_config structure is not properly initialized before being passed to the sdw_stream_add_slave() function. This allows the type field to contain garbage data, which is subsequently copied to stream->...
CVE-2026-98744 ASoC: codecs: max98363: fix uninitialized stream_config->type
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...
CVE-2026-98744
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...
EUVD-2026-103828
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...
CVE-2026-98743
The Linux kernel contains a vulnerability in the ASoC: codecs: rt1017-sdca-sdw component where the stream_config structure is not initialized before being passed to sdw_stream_add_slave(). This allows the type field to contain garbage data , which is subsequently copied to stream->type by sdw_...
CVE-2026-98743 ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...
CVE-2026-98743
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...
EUVD-2026-103975
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending...
CVE-2026-98721
The Linux kernel contains a vulnerability in the mtd: rawnand: cadence driver. The issue arises because the Cadence NAND interrupt handler uses both an IRQ lock and a completion object , but these are registered before being properly initialized. This sequence creates a race condition where a pen...
CVE-2026-98721 mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending...
EUVD-2026-103956
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...