CVE-2025-38527

CVE-2025-38527 affects the Linux kernel smb client (cifs_oplock_break). A race during unmount can lead to a use-after-free of cinode when the superblock is deactivated. The vulnerability occurs because cifs_oplock_break() may access cinode after the last superblock reference is released, triggeri...

CVE-2025-71077

In the Linux kernel vulnerability CVE-2025-71077, tpm2_get_pcr_allocation() did not cap the number of PCR banks, allowing out-of-bounds values to cause more than minimal harm. The fix caps the limit to eight banks, limiting potential damage from external I/O. The issue affects the TPM/PCR allocat...

CVE-2026-31550

CVE-2026-31550 is a Linux kernel issue in the bcm2835-power component. The bcm2835_asb_control() polling loop could fail to properly disable the V3D master ASB on BCM2711 under heavy workloads, leaving the V3D in a broken state and potentially causing bus faults or system hangs. The mitigation in...