hisilicon-dvr-telnet

hisilicon-dvr-telnet PoC materials for article https://habr.com/en/post/486856/...

pwn-hisilicon-dvr

= HiSilicon DVR hack Istvan Toth [email protected] v1.0, 2017-09-06 :source-highlighter: pygments :toc: preamble :toclevels: 5 :toc-title: Contents :imagewidth: 100% abstract This report discloses serious vulnerabilities with proof of concept PoC code of DVR/NVR devices built using the...

abyss-c2

ABYSS C2 — HiSilicon DVR Exploit Framework ⚠️ EDUCATIONAL / DEMONSTRATION PURPOSES ONLY This software is provided exclusively for educational and authorized security research purposes. It is designed to demonstrate common IoT vulnerabilities and post-exploitation techniques in a controlled,...

CVE-2026-99199

A flaw was found in the Linux kernel's HiSilicon hip04 Ethernet driver. A local attacker can cause a Denial of Service DoS by triggering device probing under specific network shaping configurations. Due to an improper initialization order, the driver accesses internal network device operations...

CVE-2026-99199

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe calls ofphyconnect before ndev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commit ...

SUSE CVE-2026-99199

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe calls ofphyconnect before ndev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commit ...

CVE-2026-99199

The Linux kernel contains a vulnerability in the hisilicon hip04_eth driver where the hip04_mac_probe() function calls of_phy_connect() before ndev->netdev_ops is assigned. This root cause leads to a NULL pointer dereference during probing when CONFIG_NET_SHAPER is enabled, as phy_link_topo_ad...

EUVD-2026-111951

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe calls ofphyconnect before ndev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commit ...

UBUNTU-CVE-2026-99199

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe calls ofphyconnect before ndev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commit ...

Linux Distros Unpatched Vulnerability : CVE-2026-99199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe calls ofphyconnect before ndev-netdevops is assigned. phyattachdirect -...

PT-2026-128192

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04 eth: Move setting of netops to fix crash hip04 mac probe calls of phy connect before ndev-netdev ops is assigned. phy attach direct - phy link topo add phy reads dev-netdev ops through netdev need ops lock...

CVE-2026-99199

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe calls ofphyconnect before ndev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since the commit ...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/debugfs - Fix debugfs uninit process issue During the zip probe process, the debugfs failure does not stop the probe. When debugfs initialization fails, jumping to the error branch also releases registers, in...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing ofnodeput after offindcompatiblenode offindcompatiblenode increments the refcount of the returned devicenode. Calling ofnodeput prevents a refcount leak...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip – fixed a mismatch in operations on the sglsgenr variable. KASAN reported this bug as follows: 17619.659757 BUG: KASAN: Global-out-of-bounds condition in paramgetint+0x34/0x60. 17619.673193 A size 4 read was...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: hisilicon: Added multi-thread support for DMA channels. When a DMA channel is obtained and tried to be used across multiple threads, it can lead to errors and cause the system to hang. bash % echo 100...

OPENSUSE-SU-2026:22091-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function bsc1253340. - CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock...

SUSE-SU-2026:24184-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function bsc1253340. - CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock...

ROS-20260929-73-0184

The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/hpre – fixed a resource leak in the remove process. In hpreremove, when the disable operation of qm sriov fails, the following logic should continue to be executed to release the remaining resources that have be...