CVE-2026-92482

A flaw was found in the Linux kernel's pinctrl Mediatek driver. This vulnerability occurs because the gpiochip memory is freed prematurely while it is still registered, leading to a use-after-free condition. This can happen when the driver is built as a module and then unloaded. A local attacker...

CVE-2026-92481

A flaw was found in the Linux kernel's pinctrl: mediatek driver. When the driver is unloaded, it fails to properly release External Interrupt EINT resources. This oversight can result in the system attempting to access memory that has already been freed, potentially leading to system instability ...

CVE-2026-90433

A flaw was found in the Linux kernel's spi: oc-tiny driver. This vulnerability arises from a timing issue where the system attempts to free memory associated with a Serial Peripheral Interface SPI controller before ensuring that all related interrupt handling has ceased. This can lead to a...

CVE-2026-90431

A flaw was found in the Linux kernel's remoteproc component. A race condition exists between the crash handling and removal functions due to a lack of synchronization. This could allow a local attacker to trigger a use-after-free vulnerability. Successful exploitation of this flaw may lead to...

CVE-2026-90429

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A synchronization issue exists between the error Interrupt Service Routine ISR and the Virtual Interrupt Function VINTF de-initialization process. A concurrent error could lead to the ISR attempting to access a VINTF that is...

CVE-2026-90423

A flaw was found in the Linux kernel's RDMA/rxe component. An error in the On-Demand Paging ODP initialization path can lead to a Use-After-Free UAF vulnerability. During error handling, memory is prematurely released, but a pointer to it is not properly cleared. This allows subsequent operations...

CVE-2026-90421

A flaw was found in the Linux kernel's Peripheral Component Interconnect PCI subsystem. This Use-After-Free UAF vulnerability arises when a PCI device probe operation occurs concurrently with the removal of a dynamic ID. This timing issue could allow a local attacker to cause a system crash,...

CVE-2026-90410

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI davinci component. A timing issue exists during the deallocation of the SPI controller, where its memory can be freed before the associated interrupt handler is fully drained. This can lead to a use-after-free vulnerability,...

CVE-2026-90394

A flaw was found in the sc2731charger driver within the Linux kernel. This vulnerability occurs because the driver fails to properly cancel scheduled work during its removal process. When the driver is unregistered, it does not ensure that pending or running tasks are terminated before its...

CVE-2026-90393

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter component. This vulnerability arises from a race condition in the bpfnetnslinkupdateprog function, where checks are performed without proper locking. A local attacker could exploit this to trigger a Use-After-Free UAF condition,...

CVE-2026-90392

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local attacker could exploit a Use-After-Free UAF vulnerability by concurrently replacing a BPF program while its information is being read without proper locking. This could allow the attacker to achieve privilege...

CVE-2026-90380

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A use-after-free vulnerability occurs due to a race condition in the mt76rxpollcomplete function. This can happen when a Wi-Fi station STA is removed, but the system still attempts to access its associated wireless client ID wcid. An...

CVE-2026-90363

A flaw was found in the Linux kernel's drm/msm component. During the initialization of Kernel Mode Setting KMS, an error handling path attempts to deallocate resources twice. This double deallocation leads to a use-after-free error, which can cause a system crash. A local attacker could potential...

CVE-2026-90356

A flaw was found in the Linux kernel's mt76 wifi driver, specifically in the mt7996 component. This vulnerability arises from an incorrect order of operations during a full reset, where Virtual Interface VIF links are freed before their corresponding Wireless Client ID WCID entries are cleared...

CVE-2026-90353

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability arises from a use-after-free error in the external PHY physical layer registration error path. When the main PHY initialization fails after the external PHY has been registered, the external PHY hardware is prematurely...

CVE-2026-90329

A flaw was found in the Human Interface Device HID subsystem of the Linux kernel. This vulnerability arises from a race condition during the probe process, where report callbacks can attempt to access resources that have already been freed due to a failed probe. This can lead to a use-after-free...

CVE-2026-90057

A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP implementation. A local attacker could exploit a race condition during a tty hangup operation, causing the slipreceivebuf function to access memory after it has been freed. This use-after-free vulnerability can lead to...

CVE-2026-80923

A flaw was found in the Linux kernel. When the ttyregisterdriver function fails, the global dbcttydriver pointer is not properly cleared. This can lead to a use-after-free vulnerability during module unload, where the system attempts to unregister an already freed driver, potentially causing syst...

CVE-2026-80914

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. A use-after-free vulnerability can occur in the isoconnready function if a listener socket is closed concurrently while a child socket is being created. This can lead to a dangling pointer being dereferenced upon a later...

SUSE-SU-2026:4753-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop bsc1284662. -...