Netcore Power 15AX 操作系统命令注入漏洞

Netcore Power 15AX is a wireless router device produced by Netcore Corporation. Versions of Netcore Power 15AX starting with 3.0.0.6938 and earlier have a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter IpAddr in the...

CVE-2026-4840: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin/netis.cgi of the component Diagnostic Tool Interface. Performing a manipulation of the argument IpAddr results in os command injection. Remote exploitation ...

PT-2026-28464

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. Before version 2026.02.0, during the processing of RemoteStop, a delayed authorization response resets the authorized variable to true. This bypasses the...

PT-2026-28350

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race condition that can lead to concurrent access to std::map, potentially causing container or optional...

The vulnerability of the amd_rp_pme_resume() function in the arch/x86/pci/fixup.c module, which is part of the Linux operating system’s platform support for x86 kernels, allows a hacker to trigger a service failure.

The vulnerability of the amdrppmeresume function in the arch/x86/pci/fixup.c module of the Linux operating system’s platform involves an infinite wait loop for resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the power_supply_temp2resist_simple() function in the drivers/power/supply/power_supply_core.c file of the Linux kernel’s power management driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the powersupplytemp2resistsimple function in the drivers/power/supply/powersupplycore.c file of the Linux kernel’s power management driver module is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mt76x0_phy_get_target_power() function in the drivers/net/wireless/mediatek/mt76/mt76x0/phy.c module of the Mediatek wireless adapter driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt76x0phygettargetpower function in the drivers/net/wireless/mediatek/mt76/mt76x0/phy.c module of the Mediatek wireless adapter driver for the Linux operating system is related to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to compromis...

SUSE CVE-2026-23283

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931hwmonread In fp9931hwmonread, if regmapread failed, the function returned the error code without calling pmruntimeputautosuspend, causing a PM reference leak...

SUSE CVE-2026-23295

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds devlock and then calls pmruntimeresumeandget, which waits for...

CVE-2026-23283

A flaw was found in the Linux kernel's regulator: fp9931 component. This vulnerability occurs when the fp9931hwmonread function fails to properly release a power management PM runtime reference if a regmapread operation fails. This oversight can lead to a PM reference leak, potentially causing...

EUVD-2026-15206

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931hwmonread In fp9931hwmonread, if regmapread failed, the function returned the error code without calling pmruntimeputautosuspend, causing a PM reference leak...

CVE-2026-23283

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931hwmonread In fp9931hwmonread, if regmapread failed, the function returned the error code without calling pmruntimeputautosuspend, causing a PM reference leak...

CVE-2026-23283

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931hwmonread In fp9931hwmonread, if regmapread failed, the function returned the error code without calling pmruntimeputautosuspend, causing a PM reference leak...

CVE-2026-23295

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix dead lock for suspend and resume When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds devlock and then calls pmruntimeresumeandget, which waits for...

CVE-2026-23295

CVE-2026-23295 concerns the Linux kernel accel/amdxdna driver. A deadlock can occur when a user-space process issues a query IOCTL during auto suspend: the query path holds dev_lock and calls pm_runtime_resume_and_get(), waiting for suspend to finish while the suspend callback may block on dev_lo...

CVE-2026-23283 regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read()

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931hwmonread In fp9931hwmonread, if regmapread failed, the function returned the error code without calling pmruntimeputautosuspend, causing a PM reference leak...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by improper error handling, which may lead to PM reference leaks...

PT-2026-51950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatch between power and frequency occurs during DPU runtime suspend. Calling the function dev pm opp set ratedev, 0 drops the MMCX rail to MIN SVS while the core clock frequency...

CVE-2026-33554: Stack-based Buffer Overflow

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system managemen...

PT-2026-34919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the power management sleep component where the pm restore gfp mask function triggers a spurious warning. This occurs because refcount-based GFP mask management warns...