CVE-2020-14372

CVE-2020-14372: Contourner pas si Secure Boot avec une "simple astuce" Détails de la vulnérabilité Un jour, j'ai tapé "help" dans la console de GRUB2 et j'ai vu des commandes vraiment "amusantes" : readbyte ADDR: Lire une valeur 8 bits à ADDR writebyte ADDR VAL: Écrire la valeur 8 bits VAL à ADDR...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500374 advisory. - mptcp: fix bad accounting in mptcpsubflowpushpending Paolo Abeni Orabug: 40078583 CVE-2026-97522 - mptcp: close race between scheduler and sta...

ROS-20261006-73-0366

The vulnerability of the acpiecsetup function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-90194

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI scan module. When a device fails to add, the system's rollback process does not properly clean up allocated bus IDs and instance numbers. This oversight can lead to a resource leak, potentially causing a Denial...

CVE-2026-90364

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface processor initialization. During the setup process, if certain driver registration or CPU hotplug state configurations fail, a cpufreq notifier may remain improperly registered. This improper resource cleanup c...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Check for a null return value from ACPIALLOCATEZEROED in acpidbconverttopackage. ACPICA commit number: 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0 The ACPIALLOCATEZEROED function may fail; the elements involved might be NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fixed NULL pointer dereferencing in acpievaddressspacedispatch. A new check was added to cover missed execution paths...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: Processor – Validating the bounds of the MADT IOAPIC entry. The IOAPIC hotplug lookup parses both MADT and MAT records directly. Previously, the MADT parsing method used the declared length of a subtable to advance the curs...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Updated the intermediate power state for SI. Updated the current state to the boot state during dpm initialization. During subsequent initialization, setpowerstate is called to transition to the final power state...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06, where it incorrectly enabled the use of the ACPI command when Secure Boot was enabled. This flaw allows an attacker with privileged access to create a Secondary System Description Table SSDT containing code that can overwrite the Linux...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ACPI: APEI: Send SIGBUS to the current task if a synchronous memory error is not recovered. If a synchronous error is detected due to a user-space process triggering a 2-bit uncorrected error, the CPU will raise an exception...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT – Avoid u32 multiplication overflow. In the function lpitupdateresidency, there is a possibility of overflow during multiplication, if tsckhz is large enough UINTMAX/1000. The multiplication operation should be replace...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtis: Added the function acpiputtable to prevent a memory leak. In checkacpitpm2, we obtain the TPM2 table just to ensure that it exists and isn’t used after initialization. Therefore, the acpiputtable function should be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppressing UBSAN warnings caused by incorrect field usage The definition of reg-accesswidth changes depending on the reg-spaceid type. The ACPIADRSPACEPLATFORMCOMM type uses accesswidth to indicate the PCC region;...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden the getcpuforacpiid function to prevent errors when a missing CPU entry is used. During a review discussion of the changes to support vCPU hotplug, it was noted that a check was added to ensure the GICC Global...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Calling acpiputtable to fix a memory leak. The size of the event log area is obtained from the TPM2 or TCPA table. Therefore, we call acpigettable to retrieve ACPI information. However, acpigettable should be used in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: acpi: nfit: Out-of-bounds read in acpinfitctl. Fixed an issue detected by syzbot with KASAN: BUG: KASAN: Out-of-bounds access using vmalloc in cmdtofunc, drivers/acpi/nfit/core.c:416 inline. BUG: KASAN: Out-of-bounds access...

CVE-2020-15780-exploit

American Unsigned Language par zx2c4 Ce sont deux exploits pour désactiver le kernel lockdown via l'injection de table ACPI. american-unsigned-language.sh est pour le noyau 4.15 d'Ubuntu 18.04 Bionic avec leurs correctifs personnalisés et utilise une technique. CVE-2019-20908...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1783414723)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1783414723 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit...

CVE-2026-100072

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. This vulnerability can lead to a Denial of Service DoS or system instability due to unsafe reference handling during platform device creation. Because the kernel fails to acquire a reference to the...