Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
cvelistv5medium
cve-2026-80574
The advisory addresses a vulnerability in the Linux kernel's Focaltech touchscreen driver, where a malformed packet could cause an array out-of-bounds write due to an incorrect finger index calculation. An attacker could potentially exploit this to corrupt memory, leading to system instability or unauthorized code execution. The severity is not explicitly stated, but the fix is a kernel security update. This could be relevant where Focaltech touchscreen drivers are deployed in automotive infotainment or control systems, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80571
This advisory describes a vulnerability in the Linux kernel's powerpc/pseries papr-phy-attest component, where a missing validation of command length can lead to a buffer overflow, and a memory leak occurs on error paths. An attacker could potentially exploit the buffer overflow to cause a crash or execute arbitrary code, with the issue being fixed by adding proper length checks and freeing memory on all error paths. This could be relevant where the Linux kernel is deployed in automotive systems, such as in infotainment or control units using PowerPC architecture. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80572
The advisory describes a fix in the Linux kernel for the "byd" input driver, which manages BYD touchpad hardware. The vulnerability involves a race condition where a timer callback could access freed memory during device disconnection, potentially allowing an attacker to cause a crash or exploit the system. The severity is not explicitly stated, but the fix uses a synchronization function to prevent the unsafe access. This could be relevant where the BYD touchpad driver is deployed in automotive systems, such as in-vehicle infotainment or control interfaces. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80568
The advisory addresses a vulnerability in the Linux kernel's synaptics-rmi4 driver, which handles input from Synaptics touch controllers. An attacker could trigger a heap buffer overflow by changing the diagnostic report type while a video stream is active, potentially leading to memory corruption. This could be relevant where the synaptics-rmi4 driver is deployed in automotive systems, such as infotainment or touchscreen controls, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80569
This advisory describes a vulnerability in the Linux kernel's driver for Synaptics RMI4 touch controllers, where a malicious or malfunctioning device could cause the driver to read a report larger than its allocated memory buffer, leading to a buffer overflow that could corrupt memory or leak data. The issue affects the kernel driver component, and while the advisory does not confirm automotive deployment, this could be relevant where Synaptics RMI4 touch controllers are used in automotive infotainment or display systems. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80566
The advisory addresses a vulnerability in the Linux kernel's hynitron_cstxxx touchscreen driver, where the driver fails to properly validate touch count and finger IDs, potentially allowing out-of-range values to corrupt touch state or cause buffer indexing issues. An attacker could exploit this to cause incorrect touch reporting or system instability, with the severity implied by the need for a kernel fix. This could be relevant where this touchscreen driver is deployed in automotive infotainment or display systems, though the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80567
The advisory describes a fix in the Linux kernel for the Synaptics RMI4 touchscreen driver, where a failure in the driver's worker thread could previously go unnoticed, potentially delivering stale or uninitialized memory to userspace. An attacker could exploit this to access unintended data, with the issue being resolved by properly reporting errors in the video buffer queue. This could be relevant where the Synaptics RMI4 driver is deployed in automotive infotainment or touchscreen systems, though the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80563
This advisory addresses a use-after-free vulnerability in the Linux kernel's GPIO sloppy-logic-analyzer driver, where a race condition allows a write operation to access freed memory when the device is unbound. An attacker with root access could exploit this to corrupt memory, potentially leading to system instability or privilege escalation. The severity is not explicitly rated, but the issue is confirmed under Kernel Address Sanitizer testing. This could be relevant where the GPIO sloppy-logic-analyzer driver is deployed in automotive systems, such as for debugging or signal analysis in embedded vehicle electronics. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80564
The advisory describes a NULL pointer dereference vulnerability in the Linux kernel's gve driver, caused by a missing implementation of the adjfine function for PTP (Precision Time Protocol) clock adjustment. An attacker with local user access could trigger this via a crafted command, causing a kernel crash (denial of service). The severity is not explicitly stated, but the impact is a system crash. This could be relevant where the gve driver is deployed in automotive systems, such as in virtualized or cloud-based vehicle infrastructure; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80562
The advisory addresses a bug in the Linux kernel's GPIO driver for the ml-ioh component, where a lock type was changed to prevent a system crash or malfunction under real-time kernel configurations. An attacker could potentially exploit this locking flaw to cause instability or denial of service in systems using this driver. This could be relevant where the ml-ioh GPIO driver is deployed in automotive systems, such as in embedded control units, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80559
The advisory describes a bug in the Linux kernel's driver for the SUR40 touchscreen device, where the input device was registered before the video and buffer queue components were fully initialized. This could allow a user to open the device immediately, triggering a worker thread that accesses uninitialized memory, potentially causing a system crash, and also created an error-path issue that could corrupt input core state. The fix reorders the registration and teardown processes to ensure all components are ready before use. This could be relevant where the SUR40 touchscreen driver is deployed in automotive systems, such as an in-vehicle infotainment display; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80555
The advisory describes a memory leak vulnerability in the Linux kernel's s390/vfio_ccw component, which handles channel programs for virtualized I/O on IBM mainframes. If initialization of a channel program fails, an attacker could cause the system to leak memory by repeatedly triggering such failures, potentially leading to resource exhaustion. The severity is not explicitly stated, but the fix addresses a functional flaw in memory cleanup. This could be relevant where the s390/vfio_ccw driver is deployed in automotive systems, such as in mainframe-based backend infrastructure, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80553
This advisory addresses a use-after-free vulnerability in the Linux kernel's s390/vfio_ccw component, where workqueues could be dispatched after the associated private data structure is freed. An attacker could potentially exploit this flaw to cause memory corruption or a system crash. The severity is not explicitly stated in the advisory. This could be relevant where the Linux kernel is deployed in automotive systems, such as in infotainment or telematics units, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80554
The advisory describes a vulnerability in the Linux kernel's s390/vfio_ccw component, which processes channel programs for I/O operations. An attacker could exploit the recursive processing of channel program segments to exceed an arbitrary limit, potentially causing a denial-of-service condition. The severity is not explicitly stated, but the fix imposes a limit on the number of segments to prevent this issue. This could be relevant where the s390/vfio_ccw component is deployed in automotive systems, such as in virtualized mainframe-based backend infrastructure, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80552
The advisory addresses a vulnerability in the Linux kernel's s390/vfio_ccw component, which manages I/O regions for virtualized channel subsystems. An attacker could potentially exploit an out-of-range index to access memory outside intended read/write regions, leading to a security breach. This could be relevant where the Linux kernel with s390/vfio_ccw is deployed in automotive systems, such as in virtualized or embedded environments. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80550
The advisory addresses a vulnerability in the Linux kernel's s390/vfio_ccw component, which handles channel command words (CCWs) for I/O operations. An out-of-bounds check could cause the kernel to examine memory beyond the intended array of up to 256 CCWs, potentially leading to incorrect behavior or a security issue. This could be relevant where the s390/vfio_ccw component is deployed in automotive systems, such as in virtualized or mainframe-based infrastructure, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80548
The advisory describes a fix in the Linux kernel for the s390/vfio_ccw component, which is a driver for virtualizing channel-attached devices on IBM mainframes. The vulnerability involves a race condition in the handling of I/O operations, which an attacker could potentially exploit to cause incorrect behavior or system instability. The fix expands the scope of a mutex lock to close these race windows, and the severity is not explicitly stated in the advisory. This could be relevant where the s390/vfio_ccw driver is deployed in automotive systems, though the advisory does not confirm any automotive connection. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80549
The advisory describes a fix in the Linux kernel for the s390/vfio_ccw component, which manages virtualized channel-attached devices on IBM mainframes. The vulnerability involves a cleanup routine that could run while other locks are held, potentially causing a race condition or deadlock when a device is lost. This could be relevant where the Linux kernel is deployed in automotive systems, such as in infotainment or telematics units, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80546
The advisory describes a vulnerability in the Linux kernel's s390/zcrypt component, specifically in the function that converts user-supplied data into a CCA CPRB message structure. An attacker could exploit missing input validation to cause integer overflows, leading to undersized buffer allocations, uninitialized memory access, or buffer overflows, potentially compromising system security. This could be relevant where the s390/zcrypt component is deployed in automotive systems, such as in embedded or server platforms using IBM Z hardware for cryptographic operations; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80545
The advisory describes a vulnerability in the Linux kernel's s390/zcrypt component, specifically in the function that handles EP11 cryptographic request blocks. An attacker could exploit missing input validation and arithmetic overflow issues to cause buffer overflows, potentially leading to system compromise. This could be relevant where the s390/zcrypt component is deployed in automotive systems, such as in secure cryptographic operations for embedded or server infrastructure. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80543
The advisory describes a vulnerability in the Linux kernel affecting the s390/zcrypt component, where copying user-space messages into kernel buffers can leave up to 3 bytes of uninitialized kernel memory, which may be exposed to crypto card firmware during CCA or EP11 message processing. An attacker could potentially exploit this to leak sensitive kernel memory information. This could be relevant where Linux with s390/zcrypt is deployed in automotive systems, such as in backend servers or secure communication infrastructure, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80544
The advisory describes a security fix in the Linux kernel for the s390/zcrypt component, which handles cryptographic requests for IBM Z systems. The vulnerability involves fragile struct overlays and improper ASN.1 parsing that could allow incorrect handling of the EP11 CPRB payload, potentially leading to security concerns due to lack of bounds validation. This could be relevant where the s390/zcrypt component is deployed in automotive systems, such as in secure communication or cryptographic processing for vehicle infrastructure, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80541
The advisory addresses a vulnerability in the Linux kernel's amdgpu driver, which manages AMD graphics hardware. An attacker with access to the driver could submit invalid memory domain combinations, potentially causing a system crash due to a BUG_ON() assertion. The fix adds validation to reject these invalid combinations, and the issue is resolved by returning an error instead of crashing. This could be relevant where the amdgpu driver is deployed in automotive systems, such as in infotainment or graphics processing units, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80542
The advisory describes a fix for a NULL pointer dereference vulnerability in the Linux kernel's AMD display driver, specifically in the function amdgpu_dm_crtc_set_vblank(). An attacker could trigger a system crash by enabling or querying vblank through a DRM IOCTL before a stream is attached, as demonstrated by running VKCTS WSI tests. The severity is not explicitly stated, but the impact is a kernel NULL pointer dereference leading to a crash. This could be relevant where the AMD display driver is deployed in automotive systems with embedded Linux graphics, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium
cve-2026-80540
The advisory addresses a vulnerability in the Linux kernel's amdgpu driver, specifically in the UVD video decode image size calculation, where using width instead of pitch could lead to an overflow. An attacker could potentially exploit this to cause a denial of service or other undefined behavior. This could be relevant where the amdgpu driver is deployed in automotive systems with AMD graphics hardware, though the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.