The vulnerability of the mtk_vcodec_fw_scp_init() function in the driver/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_scp.c file of the Linux kernel-based multimedia device support driver allows a attacker to cause a service failure.

The vulnerability of the mtkvcodecfwscpinit function in the driver/media/platform/mediatek/vcodec/common/mtkvcodecfwscp.c file of the Linux kernel multimedia device support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failu...

The vulnerability of the lpfcdebugfs_lockstat_write() function in the drivers/scsi/lpfc/lpfcdebugfs.c driver of Linux’s SCSI device kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpfcdebugfslockstatwrite function in the drivers/scsi/lpfc/lpfcdebugfs.c driver for Linux SCSI devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the io_init() function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinit function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the usb_reset_device() function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usbresetdevice function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the amdgpu_bo_validate_size() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_object.c source file of the AMD GPU kernel for Linux’ Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to cause a system failure.

The vulnerability of the amdgpubovalidatesize function in the drivers/gpu/drm/amd/amdgpu/amdgpuobject.c source file of the AMD GPU kernel for Linux Direct Rendering Infrastructure DRI driver architecture is related to the access to an uninitialized pointer. Exploiting this vulnerability could all...

The vulnerability of the raid_status() function in the drivers/md/dm-raid.c module of the Linux operating system’s device driver for multiple devices (RAID and LVM), which allows an attacker to access protected information or cause service failures.

The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the cx25821_finidev() function in the drivers/media/pci/cx25821/cx25821-core.c file of the Linux kernel’s multimedia device support driver allows a attacker to cause a service failure.

The vulnerability of the cx25821finidev function in the drivers/media/pci/cx25821/cx25821-core.c file of the Linux kernel’s multimedia device support driver is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ismt_access() function in the drivers/i2c/busses/i2c-ismt.c module of the I2C driver for the Linux operating system’s hardware bus allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ismtaccess function in the drivers/i2c/busses/i2c-ismt.c module of the I2C driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrummr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex instead of RTNL to protect the multicast route list, so that it will not change while the driver periodically traverse...

Vulnerability of the nvme_alloc_admintags() function in the drivers/nvme/host/pci.c module – The NVME kernel support driver in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the nvmeallocadmintags function in the drivers/nvme/host/pci.c module – The Linux operating system’s NVME kernel support driver is vulnerable due to a pointer dereferencing issue involving NULL pointers. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerabilities of the functions pci_epf_test_set_bar() and pci_epf_test_free_space() in the driver/drivers/pci/endpoint/functions/pci-epf-test.c file of the Linux operating system’s PCI kernel device driver allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions pciepftestsetbar and pciepftestfreespace in the driver/drivers/pci/endpoint/functions/pci-epf-test.c file of the Linux kernel’s PCI driver module are related to the reallocation of previously freed memory. Exploiting these vulnerabilities could allow an attack...

Exploit for Improper Privilege Management in Microsoft

Windows Privilege Escalation ========================== A col...

PT-2026-39071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the stratix10-rsu firmware driver when Remote System Update RSU is disabled in the First Stage Boot Loader FSBL. The issue arises because the rsu sen...

The vulnerability of the vdpasim_free() function in the drivers/vdpa/vdpa_sim/vdpa_sim.c module of the vDPA device driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vdpasimfree function in the drivers/vdpa/vdpasim/vdpasim.c module of the vDPA device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the igb_enable_sriov() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the igbenablesriov function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Linux kernel’s Ethernet network adapter driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the mlx5e_init_rep_rx() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the storvsc_probe() function in the drivers/scsi/storvsc_drv.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storvscprobe function in the drivers/scsi/storvscdrv.c file of the Linux SCSI device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

ViGEmBus-Driver-Exploitation

Summary ViGEmBus.sys is a kernel-mode driver used for virtu...

CVE-2025-25058

Improper initialization for some ESXi kernel mode driver for the IntelR Ethernet 800-Series before version 2.2.2.0 esxi 8.0 & 2.2.3.0 esxi 9.0 within Ring 1: Device Drivers may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexi...