CVE-2026-97455

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface Component Architecture ACPICA. When terminating a control method, references to method local variables and arguments are not properly cleared, leading to a use-after-free condition when internal execution state...

CVE-2026-97437

A flaw was found in the Linux kernel's ntfs3 file system driver. Improper bounds checking during directory reading and index lookups can lead to an out-of-bounds memory read. A local attacker could exploit this vulnerability by mounting a specially crafted NTFS image, which could crash the system...

CVE-2026-97604

A flaw was found in the Linux kernel's virtual framebuffer vfb driver. A local user can trigger a race condition by requesting colormap data while simultaneously unbinding the driver, causing memory to be freed while still being copied to user space. This use-after-free flaw can lead to a system...

CVE-2026-97581

A flaw was found in the Linux kernel's Hantro video decoder driver. When processing High Efficiency Video Coding HEVC video streams, the driver fails to validate the number of tile rows and columns against the allocated buffer capacity. A local attacker could exploit this vulnerability by...

CVE-2026-97560

A flaw was found in the Linux kernel's SMB Server Message Block client. When parsing a share-root relative native symbolic link, an incorrect length calculation causes the client to read past the end of the allocated buffer in the smb2parsenativesymlink function. A malicious server or attacker...

CVE-2026-98053

A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS driver. This flaw may allow a local attacker to cause a Denial of Service DoS or expose sensitive kernel memory by triggering an out-of-bounds read. The issue occurs when the driver processes audio topology settings without...

CVE-2026-98050

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to a race condition in the Mellanox switch mlxsw driver. When handling Precision Time Protocol PTP traffic, the garbage-collection workqueue and the network polling thread may concurrently modify shar...

CVE-2026-98047

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier, which may allow a local attacker to cause a denial of service DoS or potentially escalate privileges. When verifying red-black tree rbtree callbacks, the verifier fails to enforce callback restrictions across nested...

CVE-2026-14960-CVE-2026-14961

Pegatron TdeIo64 드라이버 tdeio64.sys 권한 상승 취약점 | ---|--- CVE ID| CVE-2026-14960, CVE-2026-14961 공급업체| Pegatron Corporation 제품| TdeIo 드라이버 tdeio64.sys 장치 인터페이스| \.\TdeIo 취약점 유형| 부적절한 접근 제어 CWE-284, 임의 커널 메모리 읽기/쓰기 CWE-787/CWE-125, 보호되지 않은 I/O 포트 접근 영향| SYSTEM 권한 상승, 하드웨어 수준 침해 공격 벡터| 로컬 필요 권한| 낮음 모든...

CVE-2026-98034

A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. This flaw allows a local user to achieve privilege escalation by submitting a specially crafted eBPF program. Because the verifier fails to properly track register precision when writing to kernel pointers, it...

CVE-2026-98032

A flaw was found in the Linux kernel's tracing subsystem. A race condition occurs when concurrent subbuffer resizing takes place while raw trace data is being read. A local user could exploit this flaw to cause a Denial of Service DoS or disclose uninitialized kernel memory due to stale buffer si...

CVE-2026-16513

The userspace verifier zvrfyrtiosqecopyingethandles in subsys/rtio/rtiosyscalls.c subsys/rtio/rtiohandlers.c before v4.3.0 validated the RTIO object handle and the sqes input array, but not the handle out-parameter. On the first loop iteration it executed handle = sqe, storing the kernel address ...

CVE-2026-102006

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

EUVD-2026-88548

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

CVE-2026-102006 VxWorks 7 Memory allocation

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

CVE-2026-102006

Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory management flaw where specific system call arguments cause the process management subsystem to fail to release allocated kernel memory before an application terminates. This can lead to a high availability impact as kernel memo...

CVE-2026-16513

The Zephyr RTOS (with CONFIG_USERSPACE and CONFIG_RTIO enabled) is vulnerable to an arbitrary kernel write due to missing write validation in the z_vrfy_rtio_sqe_copy_in_get_handles() verifier within subsys/rtio/rtio_syscalls.c. The system fails to check the handle out-parameter, allowing a user-...

CVE-2025-8061-Exploit

CVE-2025-8061 익스플로잇 개요 LnvMSRIO.sys Lenovo MSR I/O 드라이버에 대한 개념 증명 익스플로잇으로, Superfetch VA-to-PA 변환을 통해 임의의 물리 메모리 읽기/쓰기 및 커널 메모리 접근을 시연합니다. 드라이버 정보 속성| 값 ---|--- 드라이버 이름| LnvMSRIO.sys 장치 이름| \.\WinMsrDev 서비스 이름| LnvMSRIO 제조사| Lenovo 목적| 시스템 유틸리티를 위한 MSR 및 물리 메모리 접근 취약한 IOCTL 드라이버는 사용자 모드에 권한 있는 커널...

CVE-2026-97686

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-97686

Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory resource leak. Specific system call arguments can cause the IPNET subsystem to fail to release allocated kernel memory and system file descriptors before the calling application terminates. This issue can lead to a high impact ...