2439 matches found
EUVD-2026-64389
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...
EUVD-2026-64390
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...
CVE-2026-74703 vhost-scsi: Validate T10 PI scatterlist counts
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...
PT-2026-79707
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost scsi setup vq cmds runs from VHOST SCSI SET ENDPOINT and allocates each command's protection scatterlist array prot sgl according to the acknowledged VIRTIO SCSI F T10 PI bi...
PT-2026-79708
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...
Linux Distros Unpatched Vulnerability : CVE-2026-74702
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array...
Linux Distros Unpatched Vulnerability : CVE-2026-74703
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request...
CVE-2026-74703: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...
CVE-2026-74702: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...
ROOT-APP-PYPI-CVE-2025-69224 CVE-2025-69224 in aiohttp - Patched by Root
Root has patched CVE-2025-69224 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100183)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100183 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUFEEEEN | RBUFPMEN in RBUFENERGYCTRL breaks th...
Exploit for Use After Free in Linux Linux_Kernel
vivo/iQOO Temporary Root Toolkit No unlocking required, no...
cve-2026-43499 — Updated!
GhostLock Exploitation Failure Summary on PD2229 SM8475, 5.10.233 GKI I. Vulnerability and Device Facts 1.1 CVE-2026-43499 GhostLock Basic Information Item| Value ---|--- Vulnerability Type| Stack Use-After-Free in the rtmutex / futex PI path Introduced Version| Linux 2.6.39-rc1 May 2011, commit...
kernel: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
A flaw was found in the Linux kernel's futex Fast Userspace Mutexes subsystem. A race condition between two concurrent futex operations can lead to a system live lock. This occurs when a task attempting to exit early due to a signal or timeout becomes deadlocked while another task continuously...
ROOT-APP-PYPI-CVE-2025-66416 CVE-2025-66416 in mcp - Patched by Root
Root has patched CVE-2025-66416 in the mcp package for Root:PyPI. Multiple fixed versions available...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploi...
CVE-2026-43499-aristotle-apk build-43
Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...
USN-8615-2: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...