85332 matches found
CVE-2026-98922
The Linux kernel contains a vulnerability in the emac driver causing a NULL pointer dereference during driver initialization. The issue stems from a netdev_need_ops_lock() check in phy_link_topo_add_phy() occurring before netdev_ops were determined. The root cause was triggered by a change in loc...
CVE-2026-98877
The Linux kernel contains a vulnerability where setting kvm-arm.vgic_v4_enable=1 on a system with GICv4 but no MSI controller device tree node causes a kernel panic . The root cause is a NULL pointer dereference because the kernel attempts to access gic_domain when it is NULL. The fix involves se...
EUVD-2026-108723
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed When accidentally setting “kvm-arm.vgicv4enable=1” on a system that has no MSI controller device tree node and GICv4, it results a panic as “gicdomain” is NULL and the...
EUVD-2026-108722
In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1xdeviceinit, the error teardown paths do not check client-ops before dereferencing it, unlike the forward init paths which correctly guard with 'client-ops &&'. Th...
CVE-2026-98876
The Linux kernel contains a vulnerability in the host1x_device_init() function where error teardown paths fail to verify if client->ops is non-null before dereferencing it. This oversight, absent in the forward init paths, can lead to a NULL pointer dereference if the pointer is null. The issu...
CVE-2026-98875
The Linux kernel contains a vulnerability in the drm/nouveau/gsp component involving the GA100 chip table . During the tu102_gsp_oneinit() function, the booter constructor requires device->sec2 to access the SEC2 falcon for booter-load and booter-unload firmware. Due to a missing .sec2 entry, ...
EUVD-2026-108721
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...
CVE-2026-98849
A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP driver. When creating a PFCP network interface, a failure during device registration triggers error handling that attempts to release an internal network socket twice. This improper cleanup results in a null pointer...
CVE-2026-98785
A flaw was found in the Linux kernel's AMD display driver. During power management suspend operations under low memory conditions, the driver fails to handle memory allocation failures and retains an invalid null state. When the system subsequently attempts to resume or recover the graphics...
CVE-2026-98786
A flaw was found in the Linux kernel's AMD GPU display driver. During DisplayPort Multi-Stream Transport MST display disconnection, a race condition can cause the driver to access display data structures without verifying that they remain valid. A local user or physically proximate attacker...
CVE-2019-10207
CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hciuart: kernel NULL pointer dereference gcc CVE-2019-10207.c -o cve-2019-10207-poc -static test on 4.20.0 kernel compile CONFIG must be opened: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...
CVE-2023-3338-DECPwn
DECPwn Practicing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled. Scenarios Everything disabled : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" Code execution is redirected to the output function in userland, which invokes...
cve-2026-86547-mrubyc-op-enter
CVE-2026-86547 — mrubyc OPENTER NULL Pointer Dereference Standalone proof of concept for CVE-2026-86547 , a NULL pointer dereference in mrubyc's openter handler through release 4.0.0. Summary mrubyc is a lightweight Ruby implementation for embedded systems. Its bytecode VM keeps the current...
SIOCtl
SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...
CVE-2026-98756
A flaw was found in the Linux kernel's Cadence USB3 driver. A local user could exploit this flaw to cause a Denial of Service DoS by crashing the system. During device discovery of a multi-function Cadence USBSS Peripheral Component Interconnect PCI device, the driver attempts to access shared da...
CVE-2026-98753
A flaw was found in the Linux kernel's TTY subsystem. A local user can cause a Denial of Service DoS by triggering a race condition during terminal device activation and hangup operations. When device activation fails, the kernel fails to restore an error flag, allowing subsequent input/output...
CVE-2026-98747
A flaw was found in the Linux kernel's serial core subsystem. This flaw allows a local user with administrative access to cause a Denial of Service DoS by crashing the system. The issue occurs during the unregistration of a serial port that failed during initial setup or was previously torn down,...
CVE-2022-34556
Description of CVE-2022-34556 PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. Any project or library that uses Picoc also suffers from this issue. An example of this would be picoc-js. Setting up our environment To replicate the null pointer dereference...
