GhostTunnel

GhostTunnel GhostTunnel 是一种隐蔽的后门传输方法，可用于隔离环境。它可以通过 HID 设备仅释放载荷（代理）来攻击目标，释放载荷后即可移除 HID 设备。 GhostTunnel 使用 802.11 Probe Request 帧和 Beacon 帧进行通信，无需建立 WiFi 连接。具体而言，它通过将数据嵌入信标和探测请求中来通信。我们发布了用 C/C++ 实现的 GhostTunnel 服务器和 Windows 代理。代理无需提升权限，它利用系统 WiFi API 发送探测请求并接收信标。例如在 Windows 上，使用 Native WiFi...

CVE-2020-9332

CVE-2020-9332 描述 FabulaTech 的“USB for Remote Desktop”和“USB over Network”中存在一个有漏洞的总线驱动程序，允许低权限用户添加一个完全受控的软件 USB 设备，这可能在常见情况下被攻击者利用以提升权限 漏洞类型 不正确的访问控制 产品供应商 FabulaTech 受影响的产品代码库 USB for Remote Desktop USB over Network 攻击类型 本地 权限提升影响 true CVE 其他影响 添加由非特权用户完全控制的受信任软件 USB HID 设备 发现者 来自 SentinelOne 的...

Astra Linux – Vulnerability in Chromium

Memory access out of bounds in WebHID in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption through a malicious HID device. Chromium security severity: High...

EUVD-2026-76535

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cannot race with hardware teardown during probe failure or device removal...

SUSE CVE-2026-80783

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-80783

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-80783

CVE-2026-80783 affects the Linux kernel's HID magicmouse driver. The function magicmouse_raw_event() handles DOUBLE_REPORT_ID (0xf7) packets by splitting them and recursing on each half. The only guard was a size

EUVD-2026-71426

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-80783 HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-80783 HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

PT-2026-85624

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse raw event magicmouse raw event handles DOUBLE REPORT ID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The...

CVE-2026-80783: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-72079

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unbound. However, it currently relies on the interface class to distinguish...

DEBIAN-CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68359

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiosta...

CVE-2026-68361 hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-psu Stop device IO before calling hidhwstop hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiostart withi...

EUVD-2026-55459

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-kraken3 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

Linux Distros Unpatched Vulnerability : CVE-2026-68359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nzxt-smart2 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputrepor...

CVE-2026-64427

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORTIDDJSHORT related user initiated OOB write" added validation for the DJ short output report, but the error pa...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: fixed a potential buffer overflow in i2chidgetreport i2chidxfer is used to read recvlen + sizeofle16 bytes of data into ihid-rawbuf. The former can originate from the user space of the hidraw driver and is bounded b...