https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:29:24 +0000 https://vulnerability.circl.lu/vuln/cve-2026-90216 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ubi: Fix rollback for explicit UBI device numbers</p> <p>ubi_init_attach() rolls back module initialization failures by scanning ubi_devices[0..i-1], where i is the mtd= parameter index. That assumes the parameter index matches the UBI device number.</p> <p>That assumption is not true when mtd= specifies an explicit ubi_num. A successfully attached device can be stored at a higher ubi_devices[] slot, and a later failure can miss it during rollback.</p> <p>Scan the full ubi_devices[] array and detach by the actual array index, matching the way UBI devices are stored.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ubi: Fix rollback for explicit UBI device numbers</p> <p>ubi_init_attach() rolls back module initialization failures by scanning ubi_devices[0..i-1], where i is the mtd= parameter index. That assumes the parameter index matches the UBI device number.</p> <p>That assumption is not true when mtd= specifies an explicit ubi_num. A successfully attached device can be stored at a higher ubi_devices[] slot, and a later failure can miss it during rollback.</p> <p>Scan the full ubi_devices[] array and detach by the actual array index, matching the way UBI devices are stored.</p> https://vulnerability.circl.lu/vuln/cve-2026-90216