2609 matches found
CVE-2026-82807: Improper Privilege Management
A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...
CVE-2026-80698
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...
CVE-2026-80618
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpuamdkfdgpuvmfreememoryofgpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU. When...
ROS-20260828-73-0001
The vulnerability of the rpitsprobe function in the drivers/input/touchscreen/raspberrypi-ts.c file of the touchscreen driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failur...
Linux Distros Unpatched Vulnerability : CVE-2026-80710
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct...
CVE-2026-81579
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81579
WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...
CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
EUVD-2026-66984
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
PT-2026-82480
Name of the Vulnerable Software and Affected Versions WibuKey for Windows versions prior to 6.71 Description An untrusted pointer dereference in the WibuKey2 64.sys kernel driver for 64-bit Windows allows a local attacker to exploit a write-what-where primitive. This primitive enables local...
ROS-20260827-73-0022
The vulnerability of the zcdncreate function in the drivers/s390/crypto/zcryptapi.c module of the Linux S390 kernel-based cryptography driver lies in the absence of any restrictions or regulations regarding resource allocation. Exploiting this vulnerability could allow a hacker to cause service...
CVE-2026-80577 drm/panthor: skip zero-sized firmware sections
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthorfwloadsectionentry skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section-mem is left as NULL. Later...
CVE-2026-80564 gve: fix NULL dereference due to missing ptp adjfine
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099015)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099015 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Handle probe errors properly The probe procedure of setupcard in caiaq driver doesn'...
ROS-20260826-73-0021
The vulnerability of the aspeedsocinfoinit function in the drivers/soc/aspeed/aspeed-socinfo.c module of the Linux SOC kernel driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the rvu_mbox_handler_cgx_set_link_mode() and _sdp_init() functions in the Ethernet adapter driver for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the rvumboxhandlercgxsetlinkmode and sdpinit functions in the Ethernet adapter driver for Linux operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ad3552r_hs_write_data_source() function in the drivers/iio/dac/ad3552r-hs.c driver for various types of embedded sensors in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ad3552rhswritedatasource function in the drivers/iio/dac/ad3552r-hs.c driver for various types of built-in sensors in the Linux operating system is related to the issue of data being written outside of the buffer in memory. Exploiting this vulnerability could allow an...
The vulnerability of the cached_dev_free() function in the drivers/md/bcache/super.c module of the Linux operating system’s software RAID/LVM kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cacheddevfree function in the drivers/md/bcache/super.c module of the Linux operating system’s software RAID/LVM kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...