591 matches found
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...
kernel: Fix of 42 CVEs
Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through UHID, there is a possibility that we do not have output reports, resulting in reportfield being null...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: Added guards for HIDCLAIMEDINPUT in raw event callbacks; these guards were previously missing. In commit 2ff5baa9b527 “HID: appleir: Fix potential NULL dereference at raw event handling”, we addressed the issue where raw eve...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer. Since the report buffer is used by various drivers in various ways, let’s initialize it to zero during allocation, so that it cannot ever be used to leak kernel memory through special...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: Ignoring non-functional sensors in the HP 5MP Camera The HP 5MP Camera USB ID 0408:5473 reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iioinfo causes the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: The reference to the devm device for the hidinput inputdevice name needs to be corrected. Instead of referring to the input device, the correct device should be used. Referring to the inputdevice would lead to a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: core: Do not bypass hidhwrawrequest The hidhwrawrequest function is actually useful for ensuring that the provided buffer and length are valid. Directly calling this function in the low-level transport driver bypassed those...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: removed the I2CHIDREADPENDING flag to prevent lock-ups. The I2CHIDREADPENDING flag is used to serialize I2C operations. However, this is not necessary, as the I2C core already has its own locking mechanism for this...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A memory corruption flaw was discovered in the Linux kernel’s Human Interface Device HID subsystem, regarding the way a malicious USB device is inserted by a user. This flaw allows a local user to crash the system or potentially escalate their privileges on the system...
CVE-2026-69472
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-69472
CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...
CVE-2026-69472: Use After Free
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
PT-2026-87497
Name of the Vulnerable Software and Affected Versions Windows Devices Human Interface affected versions not specified Description A use-after-free condition in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue...
CVE-2026-68325
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrsacpihid command-line parser appends entries to a fixed four-element earlyacpihidmap array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before...
CVE-2026-68360
The CVE-2026-68360 issue affects the Linux kernel hwmon Corsair C-Pro driver. It describes a race where calling hid_hw_stop() does not stop device IO, creating a race between hid_input_report() and the code after hid_device_io_start() in probe. If probe fails after IO start, this can lead to a us...
CVE-2026-64595
HID: hid-lenovo-go suffered a race where a 2 ms delayed work (cfg_setup) could run after hid_destroy_device() releases hdev. The fix mirrors hid-lenovo-go-s.c by calling cancel_delayed_work_sync() and draining go_cfg_setup at hid_go_cfg_remove(), with cancellation occurring before acquiring cfg_m...
ROS-20260804-73-0003
The vulnerability of the mtreportfixup function in the Linux operating system is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure through the use of a specially connected HID device...
Linux kernel HID ALPS Buffer Overflow
The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
