IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow es un exploit de prueba de concepto para CVE-2016-7608, un desbordamiento de búfer en IOFireWireUserClient que se corrigió en macOS Sierra 10.12.2. Esta vulnerabilidad puede provocar una denegación de servicio o posiblemente la ejecución de códi...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

inception

Nota: Esta herramienta ya no está en desarrollo activo; por favor, mira PCILeech en su lugar. INCEPTION Inception es una herramienta de manipulación de memoria física y hacking que explota DMA basado en PCI. La herramienta puede atacar a través de FireWire, Thunderbolt, ExpressCard, PC Card y...

CVE-2026-90213

CVE-2026-90213 is a memory leak in the Linux kernel 's firewire: core subsystem. The bug occurs in the error path of build_tree(): when an invalid value is detected in the self ID sequence, the function returns early while previously allocated node instances remain in a local linked list, leaking...

EUVD-2026-81806

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix memory leak in error path of buildtree In the error path of buildtree, node instances can remain in the local linked list when the function returns. Whenever an invalid value is detected in the self ID sequenc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: added a bounds check in the putuser loop for DSP events. In the DSP event handling code, the putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it may overwrite data beyond t...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The commit 7ba5ca32fe6e “ALSA: firewire-lib: operate for period elapse event in process context” removed the process context workqueue from amdtpdomainstreampcmpointer and updatepcmpointers, thereby eliminating its overhead. With...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code was supposed to return an error code if initstream failed, but it instead freed dg00x-rxstream and returned a success status. This could potentially lead to use o...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firewire: net: Fix for use after free in fwnetfinishincomingpacket The netifrx function frees the skb, so we cannot dereference it to save skb-len...

CVE-2026-80970

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA FireWire Control Protocol FCP subsystem. This vulnerability allows a local attacker to trigger the copying of uninitialized kernel memory to userspace. By sending a specially crafted short or zero-length data stage duri...

CVE-2026-74734

A flaw was found in the Linux kernel's FireWire IEEE 1394 Open Host Controller Interface OHCI driver. During the error handling path of the driver's probe function, a NULL pointer dereference can occur in the arcontextrelease function if the context was not properly initialized. This vulnerabilit...

AZL-97832 CVE-2026-74734 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

UBUNTU-CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734

A NULL pointer dereference in the Linux kernel's firewire/ohci driver can crash the kernel. During early probe failure (e.g., pcim_enable_device() or MMIO mapping failure), the devres cleanup calls ar_context_release(), which dereferences ctx->ohci before verifying the context was ever initial...

Linux Distros Unpatched Vulnerability : CVE-2026-74734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can...

PT-2026-82114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firewire OHCI driver where a NULL pointer dereference can occur within the ar context release function. This happens during the error handling path of the driver's...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firewire: Fix for memory leak in the payload of the request subaction to the IEC 61883-1 FCP region. This patch applies to Linux kernel versions v2.6.33 or later. For the request subaction to the IEC 61883-1 FCP region, the Linux...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fixed an uninitialized flag for AV/C deferred transactions. AV/C deferred transactions were supported at commit 00a7bb81c20f “ALSA: firewire-lib: add support for deferred transactions”. However, the ‘deferrabl...