CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom Un servicio Bluetooth Classic RFCOMM del intercomunicador Parani M10 está expuesto sin aplicar autenticación segura ni un control de acceso adecuado. Una vez dentro del alcance, cualquier dispositivo puede...

CVE-2026-97479 driver core: Avoid warning when removing a device while its supplier is unbinding

In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 devicelinksnodriver+0xcc/0xfc ... Cal...

CVE-2026-97432 wifi: iwlwifi: mvm: fix P2P-Device binding handling

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device can run into the following scenario, as observed by our testing: - a station interface is connected on some channel - the P2P-Device does a...

CVE-2026-97432

The Linux kernel contains a vulnerability in the wifi: iwlwifi: mvm driver related to P2P-Device binding handling . A station interface and a P2P-Device can encounter a scenario where a P2P-Device is removed from a binding but its phy_ctxt pointer remains as a cache. Subsequent binding updates by...

EUVD-2026-86045

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device can run into the following scenario, as observed by our testing: - a station interface is connected on some channel - the P2P-Device does a...

CVE-2026-97432 wifi: iwlwifi: mvm: fix P2P-Device binding handling

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device can run into the following scenario, as observed by our testing: - a station interface is connected on some channel - the P2P-Device does a...

CVE-2026-66804

CVE-2026-66804: Elevación de Privilegios EoP en la Cámara Virtual Cross Device El problema, descubierto e informado de forma independiente, ahora se rastrea como CVE-2026-66804. MSRC confirmó el envío como duplicado de un informe anterior con la misma causa raíz subyacente en Windows Camera...

CVE-2026-97407 ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchippdm: Handle runtime PM resume failures in setfmt rockchippdmsetfmt calls pmruntimegetsync before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Entrega de perfiles MDM de iOS a través de HTTP Código del programa servidor MDM Python Flask mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile...

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

CVE-2026-22005 – Phishing de Código de Dispositivo OAuth 2.0 Intervalo Corto Código del Programa Python devicecodeserver.py - Authorization server with too-fast polling import time, secrets codes = @app.route'/device/code' def devicecode: code = secrets.tokenurlsafe16 codescode = 'usercode':...

ripple20

"Ripple20" Treck IOT/ICS device discovery and exploit detection v0.2 Resumen: Un paquete de Zeek para la detección pasiva de dispositivos Treck, los intentos de descubrimiento/escaneo y la explotación del conjunto de vulnerabilidades "Ripple20" en la pila TCP/IP de Treck. Referencias:...

CVE-2026-93248 drm/xe: don't WARN on kernel job timeout when device already wedged

In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xewedged@wedged-at-any-timeout wedges the device in mode 2 UPONANYHANGNORESET and then rebinds the driver. During unbind, a GSC proxy kernel submission can...

CVE-2026-93223

The Linux kernel contains a vulnerability in the tegra-video media driver. Specifically, the tegra_vip_channel_of_parse() function incorrectly handles reference counting by initializing np from dev->of_node without taking a reference, while its error paths proceed to call err_node_put(). This ...

EUVD-2026-86226

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

CVE-2026-93223 staging: media: tegra-video: fix of_node_put() on VIP parse errors

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

CVE-2026-93218

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

CVE-2026-93218 mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

EUVD-2026-85947

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

CVE-2026-93217 mm/madvise: skip device-private PMDs in cold and pageout walks

In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...

EUVD-2026-85946

In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...