61844 matches found
SUSE CVE-2026-68331
In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The Ethernet connect path stores that device in mac-mcdev and keeps it for the...
SUSE CVE-2026-68333
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch port connect path stores that device in mac-mcdev and keeps it for th...
CVE-2026-66875 Mira Hormone Monitor, Mira Android App Missing authentication for critical function
In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range approximately 10–30 meters can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via...
CVE-2026-64934
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:19+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-68067
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:15+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 23:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g 2026-08-12 00:01:35+00:00| seen|...
CVE-2026-67568
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:13+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:18:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2oepdilmaqi7n 2026-08-11 23:50:03+00:00| seen|...
CVE-2026-66098
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-18844
creationtimestamp| type| source ---|---|--- 2026-08-11 20:14:43+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgjkadjw26 2026-08-11 20:15:22+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02...
CVE-2026-18844
The CVE-2026-18844 entry concerns the Pulsetto Vagus Nerve Stimulator firmware, where several undisclosed commands are accepted over BLE without authentication or encryption and are fully processed when powered on. The connected sources offer no details on affected software versions, specific com...
CVE-2026-18844 Pulsetto Vagus Nerve Stimulator Hidden Functionality
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...
CVE-2026-18844
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...
CVE-2026-18844 Pulsetto Vagus Nerve Stimulator Hidden Functionality
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...
CVE-2026-68207
A flaw was found in the Linux kernel's media Video Processing Engine VPE driver. This issue occurs during device initialization when a specific resource is unavailable, causing the device to remain improperly registered. As a result, system resources are not correctly released, which could lead t...
CVE-2026-68180
A flaw was found in the intelth Intel Trace Hub driver within the Linux kernel. This vulnerability occurs because the intelthoutputopen function acquires a device reference that is not properly released by the intelthmscrelease function when handling Message Signaled Interrupt MSC outputs...
CVE-2026-68221
A flaw was found in the Linux kernel's Nuvoton NPCM video driver. The npcmvideoprobe function allocates memory that is not properly freed on error paths or during device removal, leading to memory leaks. Additionally, when npcmvideosetupvideo fails, associated reserved memory is not released. The...
CVE-2026-68152
A flaw was found in the Linux kernel's AMT Accelerated Mobile Page device driver. A use-after-free vulnerability can occur due to a race condition during device removal. This allows delayed work items to access a freed memory structure, potentially leading to kernel crashes or memory corruption. ...
CVE-2026-68318
A flaw was found in the pdscore component of the Linux kernel. This use-after-free vulnerability occurs because the workqueue is destroyed prematurely during the pdscremove operation, before pdscteardown completes. This timing issue allows for work to be queued on an already destroyed workqueue,...
CVE-2026-68392
A flaw was found in the Linux kernel's Bluetooth management subsystem. This vulnerability occurs due to incorrect locking when handling memory pointers during device unpairing and disconnection. An attacker could exploit this to trigger a Use-After-Free UAF condition, which is a type of memory...