CVE-2026-80821

CVE-2026-80821 affects the Linux kernel 's nvmet pci-epf driver (NVM Express over Fabrics Target, PCIe Endpoint Function). The vulnerability is a reference leak in nvmet_pci_epf_create_cq(): when PCI address-space mapping fails or returns a too-small partial mapping after nvmet_cq_create() succee...

EUVD-2026-71263

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

vscan

vscan أداة فحص الثغرات تستخدم nmap ونصوص NSE للعثور على الثغرات. تضيف هذه الأداة قيمة إضافية إلى فحص الثغرات باستخدام nmap. تستخدم نصوص NSE التي توفر مرونة في اكتشاف الثغرات واستغلالها. فيما يلي بعض الميزات التي توفرها نصوص NSE: اكتشاف الشبكة كشف الإصدارات الأكثر تطورًا اكتشاف الثغرات اكتشاف البا...

EUVD-2026-71255

In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked list LOLLM points out that online fsck can livelock if an unlinked inode list contains a loop. Use a bitmap to detect cycles...

CVE-2026-80820

CVE-2026-80820 affects the Linux kernel's XFS filesystem , specifically the online scrub (fsck) functionality. The root cause is a livelock that occurs when an unlinked inode list contains a circular loop , causing the scrub process to get stuck in an infinite cycle. The fix, referenced in upstre...

CVE-2026-80819

CVE-2026-80819 is a null pointer dereference in the Linux kernel 's Bluetooth RFCOMM subsystem. The flaw occurs when rfcomm_sock_recvmsg() calls rfcomm_dlc_accept() without holding rfcomm_mutex. A remote peer can trigger the bug by sending a DISC frame on a deferred-setup DLC, which clears d->...

EUVD-2026-71254

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcommmutex for the deferred setup accept rfcommsockrecvmsg completes a deferred setup by calling rfcommdlcaccept without holding any RFCOMM lock: if testandclearbitRFCOMMDEFERSETUP, &d-flags...

EUVD-2026-71253

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMDSYNC use-after-free on teardown armsmmuimplremove is registered as a devres action in armsmmuimplprobe, before armsmmuinitqueues allocates smmu-cmdq.q.base. On a devres unwind, whether a failed probe ...

CVE-2026-80818

CVE-2026-80818 is a use-after-free in the Linux kernel's iommu/tegra241-cmdqv driver. During a devres unwind (failed probe or unbind), the SMMU command queue is freed before arm_smmu_impl_remove() invokes tegra241_cmdqv_remove_vintf(), which issues a CMD_SYNC on the already-freed queue memory. Th...

CVE-2026-80818

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMDSYNC use-after-free on teardown armsmmuimplremove is registered as a devres action in armsmmuimplprobe, before armsmmuinitqueues allocates smmu-cmdq.q.base. On a devres unwind, whether a failed probe ...

EUVD-2026-71252

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufdioaschangeprocess when racing with ioptmapfilepages iommufdioaschangeprocess iterates every IOAS area while only holding every IOAS iovarwsem, so it assumes every area has a non-NUL...

CVE-2026-80817

A NULL pointer dereference in the Linux kernel's iommu/iommufd subsystem (drivers/iommufd/ioas.c) can cause a kernel crash. The root cause is a race condition : iopt_map_pages() inserts an IOAS area into the interval tree with area->pages still NULL, then later fills it under a different lock....

CVE-2026-80817

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufdioaschangeprocess when racing with ioptmapfilepages iommufdioaschangeprocess iterates every IOAS area while only holding every IOAS iovarwsem, so it assumes every area has a non-NUL...

CVE-2026-80816

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

EUVD-2026-71251

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status interrupt endpoint and mixer.c kills, resubmits and frees. On a device...

CVE-2026-80816

This Linux kernel vulnerability affects the ALSA FCP (Firmware Configuration Protocol) module. The root cause is that fcp_init_notify() shared a URB (mixer->urb ) with the optional UAC2 status interrupt endpoint . On devices exposing that endpoint, the early-return path fired prematurely, leav...

CVE-2026-80815

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

CVE-2026-80815

CVE-2026-80815 affects the ALSA scarlett2 driver in the Linux kernel, used for Focusrite Scarlett 2nd-generation USB audio interfaces. The root cause is that scarlett2_init_notify() shared mixer->urb with the UAC2 status interrupt endpoint managed by mixer.c. On devices with that endpoint, the...

EUVD-2026-71250

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...