📄 NPU Driver Use-After-Free Detector

This Metasploit module detects vulnerable NPU drivers susceptible to CVE-2025-21424, a use-after-free vulnerability in the MSM NPU kernel driver. Additional details are included that identify shortcomings in the original proof of concept...

The vulnerability in the function interrupt_preinit_v3_hw() of the drivers/scsi/hisi_sas/hisi_sas_v3_hw.c file in the Linux operating system’s SCSI HiSilicon SAS device support driver allows a attacker to cause a service failure.

The vulnerability of the interruptpreinitv3hw function in the drivers/scsi/hisisas/hisisasv3hw.c file of the SCSI HiSilicon SAS device support driver in the Linux operating system involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause a servic...

CVE-2026-23056 uacce: implement mremap in uacce_vm_ops to return -EPERM

In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uaccevmops to return -EPERM The current uaccevmops does not support the mremap operation of vmoperationsstruct. Implement .mremap to return -EPERM to remind users. The reason we need to explicitly disab...

The vulnerability of the spmmc_drv_probe() function in the drivers/mmc/host/sunplus-mmc.c module of the MMC/SD/SDIO card driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spmmcdrvprobe function in the drivers/mmc/host/sunplus-mmc.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the kfd_build_sysfs_node_entry() function in the drivers/gpu/drm/amd/amdkfd/kfd_topology.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD kernel-based Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the kfdbuildsysfsnodeentry function in the drivers/gpu/drm/amd/amdkfd/kfdtopology.c driver for the Direct Rendering Infrastructure DRI video card of the AMD kernel in the Linux operating system is related to incorrect resource initialization. Exploiting this vulnerability can...

The vulnerability of the amd_pmc_stbdebugfs_open_v2() function in the drivers/platform/x86/amd/pmc.c file of the Linux kernel device driver module allows a hacker to cause a service failure.

The vulnerability of the amdpmcstbdebugfsopenv2 function in the drivers/platform/x86/amd/pmc.c file of the Linux kernel device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the print_wrapper_info() function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the printwrapperinfo function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel multimedia device driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the `ssip_pn_open()` function in the `drivers/hsi/clients/ssi_protocol.c` file of the Linux kernel’s high-speed synchronous serial interface driver allows a hacker to cause a service failure.

The vulnerability of the ssippnopen function in the drivers/hsi/clients/ssiprotocol.c file of the Linux kernel’s High-Speed Synchronous Serial Interface driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE CVE-2026-23017

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entire process. In that state a subsequent reset will result in a crash as...

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CTT-NFS-Vortex-RCE New Physics Disclosure This repository cont...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier (specifically involving cpuz161.sys and other products using driver version 1.0.6.1 and earlier) fails to validate user-supplied values passed via its IOCTL interface . An attacker can provide a target address in the input buffer to cause the dri...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

EUVD-2025-206386

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

CPUID CPU-Z security vulnerabilities

CPUID CPU-Z is a system hardware information detection tool developed by CPUID Corporation. Versions of CPUID CPU-Z prior to v2.17 contained security vulnerabilities. These vulnerabilities stemmed from the lack of validation by the kernel driver for values provided by users through the IOCTL...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...

PT-2026-4982

Name of the Vulnerable Software and Affected Versions CPU-Z versions 2.17 and earlier Description The kernel driver of CPUID CPU-Z does not validate user-supplied values passed via its IOCTL interface. This allows an attacker to access sensitive information by sending a crafted request. The...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request...