CVE-2026-89830

CVE-2026-89830 affects the Linux kernel 's f2fs filesystem. In __allocate_data_block(), when a new data block is allocated (dn->data_blkaddr == NULL_ADDR), inc_valid_block_count() is called to increment total_valid_block_count and i_blocks. If the subsequent f2fs_allocate_data_block() call the...

EUVD-2026-80430

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In allocatedatablock, when allocating a new data block dn-datablkaddr == NULLADDR, incvalidblockcount is called first to increment totalvalidblockcount and iblocks...

EUVD-2026-80424

In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure e.g. probe deferral and on driver unbind also if a devicetree redundantly uses the 'ddc-i2c-bus' property to point ...

CVE-2026-89824

CVE-2026-89824 affects the Linux kernel component drm/panel-edp . The root cause is a failure to drop the i2c adapter reference on probe failure (e.g., probe deferral) and on driver unbind, specifically when a devicetree redundantly uses the 'ddc-i2c-bus' property to point to the aux ddc bus. Thi...

EUVD-2026-80420

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix dclock leak on GPU reset error paths On GPU reset, dmsuspend takes dclock and leaves it for dmresume to drop. If amdgpudmcommitzerostreams or dmdmubhwinit fails, the function returns with the lock still held...

CVE-2026-89820

CVE-2026-89820 affects the Linux kernel 's drm/amd/display subsystem. On GPU reset, dm_suspend() acquires the dc_lock and defers its release to dm_resume(). If amdgpu_dm_commit_zero_streams() or dm_dmub_hw_init() fails, the error path returns without releasing the lock , causing every subsequent ...

EUVD-2026-80416

In the Linux kernel, the following vulnerability has been resolved: drm: Fix drmcrtccommit leak if signaled when PAGEFLIPEVENT is used Commit 1c6ceeee6ebb "drm/atomic: Fix memleak on ERESTARTSYS during non-blocking commits" fixed a very similar issue when the event was allocated by...

CVE-2026-89816

CVE-2026-89816 is a memory leak in the Linux kernel's DRM (Direct Rendering Manager) subsystem. When DRM_MODE_PAGE_FLIP_EVENT is used, a drm_crtc_commit reference is not dropped if the event—allocated in prepare_signaling()—is set to NULL in complete_signaling(), preventing proper deallocation in...

CVE-2026-89804

CVE-2026-89804 affects the Linux kernel 's drm/nouveau/dmem subsystem, specifically the device-private THP (Transparent Huge Page) migration path. The root cause is a mismatched DMA unmap size : two teardown sites—nouveau_dmem_migrate_to_ram() (success path) and nouveau_dmem_migrate_copy_one() (c...

CVE-2026-89804 drm/nouveau/dmem: fix mismatched DMA unmap size for large folios

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration buffers with pagesize and records that length in dmainfo-size. For a compound folio pagesize is PAGESIZE 0 folio this...

CVE-2026-89795 PCI: Allow per function PCI slots to fix slot reset on s390

In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervisor, PCI devices are always accessed through a form of PCI pass-through which fundamentally operates on a per PCI...

EUVD-2026-80395

In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervisor, PCI devices are always accessed through a form of PCI pass-through which fundamentally operates on a per PCI...

CVE-2026-89795

CVE-2026-89795 affects the Linux kernel PCI hotplug driver on s390 systems that use a machine-level hypervisor. The root cause is that pci_create_slot() assigns a single shared pci_slot object to multifunction PCI devices; when a function is reset via the hotplug reset_slot() interface, the wrong...

CVE-2018-17240_exploit

CVE-2018-17240exploit CVE-2018-17240 Netwave Cameras メモリリーク 向け Bash エクスプロイト このエクスプロイトを脆弱な Netwave Camera に対して実行すると、 カメラのネットワーク設定と認証情報をダンプできます。 認証情報 "Possible Username" と "Possible Password" は、Web インターフェースにログインするために使用できます。 Usage : bash exploit.sh host port...

CVE-2026-89779

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

opencast-CVE-2021-43821-env

opencast-CVE-2021-43821-env opencast cve-2021-43821 機密情報漏えい脆弱性環境 再現記事：https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...

CVE-2026-89779 fs/ntfs3: validate ef->size covers the record's name and value

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

CVE-2026-89779

A slab-out-of-bounds read in the Linux kernel's ntfs3 filesystem driver occurs when a crafted NTFS image contains an Extended Attribute (EA) record with a mismatched ef->size and elength. The function ntfs_read_ea() in fs/ntfs3/xattr.c validates only that the record fits in the remaining buffe...

EUVD-2026-80300

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

cve-2026-20127

CVE-2026-20127 扫描器 概述 该项目是一个基于 Windows 的网络扫描工具，使用 C++ 编写，旨在识别潜在的 Cisco SD-WAN / vManage 类服务，并针对标记为 CVE-2026-20127 的引用问题执行漏洞检查。 功能 IP 范围扫描（起始 IP → 结束 IP） 针对 Cisco SD-WAN / vManage 特征的服务指纹识别 HTTP 响应头与响应体分析 向疑似管理端点发送测试请求 根据响应内容与状态码检测潜在暴露风险 简单的交互式 CLI 界面 对敏感端点执行二次请求： /dataservice/client/admin/setting...