cve-2023-40429-ez-device-name

HostName Обзор HostName — это пример приложения, демонстрирующий, как стороннее приложение может получить доступ к имени устройства пользователя без права com.apple.developer.device-information.user-assigned-device-name. Подробности В iOS 16 Apple добавила право...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 позволяет удаленным атакующим вызвать отказ в обслуживании через HTTP-запрос к имени устройства MS-DOS. Внешняя ссылка: https://marc.info/?l=bugtraq&m=101174569103289&w=2 Автор Alex Hernandez также известный как @alt3kx...

CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Обход Windows-имён устройств в safejoin из Werkzeug Статус: Публично раскрыто. Исправлено в werkzeug 3.1.6. Серьёзность: Умеренная Автор отчёта: @alimezar Консультация: GHSA-29vq-49wr-vm6x Затронутые версии...

CVE-2024-43363

CVE-2024-43363 CVE-2024-43363 Эксплойт-скрипт Этот Python-скрипт предназначен для проверки, уязвим ли экземпляр Cacti для CVE-2024-43363, уязвимости удаленного выполнения кода RCE, вызванной отравлением журналов. Как работает уязвимость: Отравление журналов: Злоумышленник внедряет PHP-код в имена...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NTB: Fixed a possible name leak in ntbregisterdevice. If deviceregister fails in ntbregisterdevice, the device name allocated by devsetname should be freed. According to the comment in deviceregister, callers should use putdevice...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ptp: A possible memory leak has been fixed in ptpclockregister. I encountered a memory leak during the fault injection test as follows: Unreferenced object: 0xffff88800906c618 size 8 Command: comm "i2c-idt82p33931", PID 4421,...

Astra Linux – Vulnerability in Linux

In the file drivers/pci/hotplug/rpadlpar/sysfs.c within the Linux kernel up to version 5.11.8, the RPA PCI Hotplug driver suffers a user-tolerable buffer overflow when writing a new device name to the driver from user space. This allows user space to write data directly to the kernel stack frame...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsihostalloc After a device is initialized using deviceinitialize, or its name is set using devsetname, the device must be freed using putdevice. Otherwise, the device name will be leaked, as it...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mISDN: A possible memory leak in mISDNregisterdevice has been fixed. After committing 1fa5ae857bb1 "driver core: get rid of struct device’s busid string array", the name of the device is allocated dynamically. The putdevice...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mtd: Fixed a device name leak when registering a device in addmtddevice. There is a kmemleak when registering a device fails: Unreferenced object 0xffff888101aab550 size 8: Command "insmod", PID 3922, jiffies 4295277753 age...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: The reference to the devm device for the hidinput inputdevice name needs to be corrected. Instead of referring to the input device, the correct device should be used for the devm allocation of the inputdevice name...

MINI-VM33-G4VC-35H6

Bulletin has no description...

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

AZL-93569 CVE-2026-64332 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

UBUNTU-CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

CVE-2026-64332 USB: ulpi: fix memory leak on registration failure

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

CVE-2026-64332 USB: ulpi: fix memory leak on registration failure

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

CVE-2026-64332

CVE-2026-64332 is a memory leak in the Linux kernel's USB ULPI driver. When a ULPI device registration fails early, the allocated device name is never freed, leading to gradual resource exhaustion and potential denial of service (CVSS 5.5, local/low privileges, high availability impact). The fix ...