CVE-2026-80728

This Linux kernel vulnerability affects the DRM/amdgpu driver. The root cause is a devres teardown ordering issue : because devres teardown is LIFO and the aperture devres node was registered after the DRM device node, devres_release_all() unmaps the aperture before the DRM device release callbac...

SUSE CVE-2026-74355

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...

SUSE CVE-2026-74379

In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When devdaxkmemprobe partially succeeds at least one range is mapped but a subsequent range fails requestmemregion or addmemorydrivermanaged, the probe silently...

PT-2026-84941

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC xilinx formatter pcm component where interrupt handlers use dev get drvdata to retrieve driver data. Because the driver data is only assigned at the end of th...

PT-2026-84926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel page fault occurs during probe failure or rollback in the Linux kernel. This is caused by the Last-In-First-Out LIFO nature of devres teardown, where the aperture devres node is...

SUSE CVE-2026-72406

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

SUSE CVE-2026-72432

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Check ACPICOMPANION against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, so platform drivers that rely on the...

SUSE CVE-2026-72167

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe, the devmioremap is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x devi...

SUSE CVE-2026-72164

In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to replace it...

httpx v1.11.0

Features • Installation • Usage • Documentation • Notes • Join Discord httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads. Features Simple and modular...

hostapd-mana v2.12

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

CVE-2026-77351: Server-Side Request Forgery (SSRF)

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos lets any authenticated user store an arbitrary SMTP host — including private and cloud-metadata IP addresses — in their personal email notification settings, with no server-side SSRF validation...

Malicious Package

Overview autobahn-electron-probe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in autobahn-electron-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a749e23bbf7c5ca871c797923855dc2c7fe1006c5843ed8a13292d7fbd4256 package.json declares preinstall and postinstall lifecycle scripts that run curl against...

MAL-2026-15589 Malicious code in autobahn-electron-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a749e23bbf7c5ca871c797923855dc2c7fe1006c5843ed8a13292d7fbd4256 package.json declares preinstall and postinstall lifecycle scripts that run curl against...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001456 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001429 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aacprobeone calls hardware-specific init function...

SUSE CVE-2026-80690

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown path if ufsrpmbprobe fails...

CVE-2026-80690

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown path if ufsrpmbprobe fails...

CVE-2026-80676

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...