CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...

CVE-2020-15780-exploit

American Unsigned Language 作者：zx2c4 这两个漏洞利用程序通过ACPI表注入来禁用内核锁定。 amerian-unsigned-language.sh 适用于Ubuntu 18.04 Bionic的4.15内核，使用其自定义补丁和一种技术。CVE-2019-20908。 amerian-unsigned-language-2.sh 适用于主线/上游内核，使用不同的技术。CVE-2020-15780。 每个脚本的头部都包含解释说明。...

Linux Distros Unpatched Vulnerability : CVE-2026-92521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: PCI: Clear driverdata on all paths that free the acpipciroot acpipcirootadd assigns the freshly allocated root to device-driverdata before dmardeviceadd a...

Linux Distros Unpatched Vulnerability : CVE-2026-93132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: RISC-V: Fix riscvacpiaddprtdep loop handling The loop in riscvacpiaddprtdep includes error conditions that are handled in a dubious - if not outright wron...

Linux Distros Unpatched Vulnerability : CVE-2026-90364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: processor: Unregister cpufreq notifier on init failure acpiprocessordriverinit registers the cpufreq policy notifier before registering the ACPI processor...

Linux Distros Unpatched Vulnerability : CVE-2026-93124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device...

Linux Distros Unpatched Vulnerability : CVE-2026-90137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWDENCODINGS parser reads passwordobjelem + posvalues while copying the supported...

Linux Distros Unpatched Vulnerability : CVE-2026-93115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/mellanox: mlxbf-pmc: Check ACPICOMPANION against NULL Every platform driver can be forced to match a device that doesn't match its list of device IDs...

Linux Distros Unpatched Vulnerability : CVE-2026-90194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: scan: fix bus ID cleanup on deviceadd failures When deviceadd fails after acpidevicesetname has allocated an instance ID and a new acpidevicebusid has bee...

Linux Distros Unpatched Vulnerability : CVE-2026-92522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and MAT records directly. The MADT walk previously used a subtable...

AZL-102186 CVE-2026-93114 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely...

CVE-2026-93114

In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely...

AZL-102986 CVE-2026-92521 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driverdata on all paths that free the acpipciroot acpipcirootadd assigns the freshly allocated root to device-driverdata before dmardeviceadd and pciacpiscanroot. Both failure paths reach the end: label where roo...

DEBIAN-CVE-2026-92522

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generi...

CVE-2026-92522

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generi...

AZL-101924 CVE-2026-92522 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generi...

AZL-102984 CVE-2026-90364 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Unregister cpufreq notifier on init failure acpiprocessordriverinit registers the cpufreq policy notifier before registering the ACPI processor driver and setting up CPU hotplug state. If driverregister or...

AZL-102036 CVE-2026-90194 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on deviceadd failures When deviceadd fails after acpidevicesetname has allocated an instance ID and a new acpidevicebusid has been linked into acpibusidlist, the rollback path only removes wakeuplis...

AZL-102794 CVE-2026-90137 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWDENCODINGS parser reads passwordobjelem + posvalues while copying the supported password encodings from the ACPI package. The outer loop only guarantees...

DEBIAN-CVE-2026-90137

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWDENCODINGS parser reads passwordobjelem + posvalues while copying the supported password encodings from the ACPI package. The outer loop only guarantees...