CVE-2018-18852

RCE autenticado en router CERIO credenciales de backdoor del fabricante CVE-2018-18852 PoC en Python hook-s3c github.com/andripwn, @andripwn en Twitter PoC funcional en Python para CVE-2018-18852, aparecido originalmente en; https://github.com/andripwn/CVE-2018-18852 Qué hay Los modelos y variant...

bowcaster

Bowcaster Framework de Desarrollo de Exploits Este framework, implementado en Python, está diseñado para ayudar a quienes desarrollan exploits proporcionando un conjunto útil de herramientas y módulos, como payloads, codificadores, servidores de conexión inversa, etc. Actualmente, el framework se...

Linksys-WRT54GL-Exploitation

Del soldador a la shell: explotación completa del hardware del router Linksys WRT54GL CVE-2022-43973 Un viaje de investigación de seguridad embebida en 10 fases: desde el descubrimiento de pines JTAG hasta la ejecución remota de código en un router doméstico basado en MIPS. | ---|--- Autor| Umber...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash in stacktop for tasks without an ABI or vDSO Not all tasks have an ABI associated with them, or a vDSO mapped to them. For example, kthreads never have such an ABI. If such a task calls stacktop, it will...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass an empty environment variable. fwgetenv will use the environment variable entry to determine the style of the environment variables. However, it is legal for the firmware to simply pass an empty...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: mips: bmips: BCM6358: disabled RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: MIPS: Loongson64: DTS: Actually fixed the PCIe port nodes for ls7a. Fixed the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found,...

SUSE CVE-2026-72314

In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulatorlocktwo should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is what wwmutexlock actually returns and what every other deadlock check in this file already uses. Function regulatorlocktwo...

CVE-2026-80627

A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...

EUVD-2026-67503

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array, but checks whether the array is full only after it has filled the selected entry. If walksystemramrange...

CVE-2026-80627

This Linux kernel vulnerability affects the MIPS memory management subsystem. The function maar_res_walk() uses wi->num_cfg as an index into a fixed-size wi->cfg array but checks whether the array is full only after writing the entry. If walk_system_ram_range() reports more than 16 memory r...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: MIPS: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following, while we display /proc/cpuinfo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fixed a memory leak caused by pgdfree The pgd page is freed by the generic implementation pgdfree since commit f9cb654cb550 „asm-generic: pgalloc: provides a generic pgdfree”, however, there are scenarios in which...

CVE-2026-72181

A flaw was found in the Linux kernel's scheduler component, specifically when handling CPU masks on MIPS architecture with CONFIGCPUMASKOFFSTACK enabled. An incorrect size calculation during the copyfromuser operation could lead to memory corruption. This vulnerability allows a local attacker to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100768 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, currentthreadinfo...

The vulnerability in the `arch/mips/kernel/relocate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/mips/kernel/relocate.c component of the Linux operating system relates to the pointer relocation beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72215

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

PT-2026-72502

In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator lock two should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is what ww mutex lock actually returns and what every other deadlock check in this file already uses. Function regulator lo...

Linux Distros Unpatched Vulnerability : CVE-2026-72181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIGCPUMASKOFFSTACK is enabled, cpumaskvart is...

USN-8620-2 linux-azure-fips vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...