5746 matches found
PT-2026-90190
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq256xx power supply driver. The USB-PHY notifier queues usb work, which triggers the power supply changed function. Because the reset action was...
PT-2026-90134
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipmi:msghandler where scheduled work may not be properly canceled if an error occurs during the startup of an IPMI interface. This prevents the interface from bein...
PT-2026-90180
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the twl4030 charger power supply component where the bci structure is allocated via devm. Two workers, bci-work and bci-current worker, dereference this structure. The...
CVE-2026-81004: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed...
PT-2026-90062
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the virtio vsock implementation. The virtio vsock remove function stops virtqueues and flushes work items before freeing the...
CVE-2026-89737: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freeing tbt on remove tbtaltmoderemove drops the plug and cable references without draining tbt-work. The work function dereferences those references, and can also requeue itself in it...
PT-2026-90226
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/cxgb4 component. The c4iw remove function can free the ctx-dev object while registration work is still pending or running. This allows the c4iw...
PT-2026-90184
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the lp8788-charger component. The lp8788 charger remove function flushes charger work before unregistering IRQs, which allows an IRQ thread to queue...
PT-2026-90191
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq24257 power supply driver. The STAT-pin interrupt is managed by devm, meaning it remains active until the devm cleanup process occurs after the...
PT-2026-90077
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the rtl8xxxu wifi driver. The problem occurs because the rtl8xxxu stop function fails to cancel the rx urb wq worker. Under active RX traffic, a worker c...
PT-2026-90264
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SUNRPC component. The function sunrpc destroy cache detail only cancels the global cache cleaner delayed work when the cache list is empty. During...
PT-2026-96435
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtio vsock remove stops the virtqueues and then flushes each work item before freeing the enclosing virtio vsock. The current order does not account for dependencies between those...
PT-2026-90239
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the mt76 driver for mt7925 wifi devices, pending mlo pm work may execute after a device is reset, suspended, or unregistered. This can lead to the system accessing freed vif/bss data ...
CVE-2026-89465: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwrrdywork, maxchargingtimework and battpresencework. pwrrdywork and battpresencework can also queue maxchargingtimework, while...
CVE-2026-89739: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3gadgetfreeendpoints due to race condition In dwc3gadgetinitendpoint, &dep-nostreamwork is bound with dwc3nostreamwork, and dwc3gadgetendpointstreamevent can queue this delayed work on...
PT-2026-90157
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A use-after-free issue exists in the via-sdmmc driver. While disabling device interrupts and freeing the IRQ prevents new card-detect work from being queued, any carddet work already queued ...
CVE-2026-80075
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...
CVE-2026-71336
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
