CVE-2020-15780-exploit

American Unsigned Language di zx2c4 Questi sono due exploit per disattivare il kernel lockdown tramite iniezione di tabelle ACPI. american-unsigned-language.sh è per il kernel 4.15 di Ubuntu 18.04 Bionic con le loro patch personalizzate e utilizza una tecnica. CVE-2019-20908...

CVE-2020-14372

CVE-2020-14372: Bypass non così Secure Boot con un "semplice trucco" Dettagli della vulnerabilità Un giorno ho digitato "help" nella console di GRUB2 e ho visto alcuni comandi davvero "divertenti": readbyte ADDR: Legge un valore a 8 bit da ADDR writebyte ADDR VAL: Scrive un valore a 8 bit VAL in...

AZL-98063 CVE-2026-80611 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80611

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80593

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...

CVE-2026-80623 coresight: ete: Always save state on power down

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never documented "arm,coresight-loses-context-with-cpu" so nobody would have...

EUVD-2026-67499

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never documented "arm,coresight-loses-context-with-cpu" so nobody would have...

CVE-2026-80611 ACPI: processor_idle: Mark LPI enter functions as __cpuidle

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80611

Linux kernel 's ACPI processor_idle subsystem contains a flaw in the acpi_idle_lpi_enter() function. When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle (LPI) state triggers an RCU warning because the function is invoked after RCU has been disabled for the current CPU, ye...

EUVD-2026-67487

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80611

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-80593 hwmon: (asus_atk0110) Check package count before accessing element

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...

CVE-2026-80593 hwmon: (asus_atk0110) Check package count before accessing element

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...

EUVD-2026-67469

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...

CVE-2026-80593

CVE-2026-80593 affects the asus_atk0110 hardware monitoring driver in the Linux kernel. The function atk_ec_present() reads the first element of each ACPI sub-package returned by the GGRP method without first verifying that the sub-package is non-empty. Because ACPICA allocates the element array ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098896 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

The vulnerability of the acpi_ec_setup() function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acpiecsetup function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out-of-bounds access when parsing CPC data If the NumEntries field in the CPC return packet is less than 2, do not attempt to access the “Revision” element of that packet, because it may not be present at that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: fixed the ACPI operand cache leak in dswstate.c ACPICA commit: 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I discovered a ACPI cache leak in cases where ACPI early termination occurs and the boot process continues. When earl...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, and Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ACPI: PAD: fixed a crash in exitroundrobin The kernel occasionally crashes in cpumaskclearcpu, which is called within exitroundrobin. This occurs when executing clearbitnr, addr with nr set to 0xffffffff. In such cases, the...