Malicious Package

Overview wbnr-probe-visible-check is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

ROS-20260928-73-0022

The vulnerability of the probe function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-96282

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...

DEBIAN-CVE-2026-96282

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...

exploitproof

reachable An agent that discovers vulnerabilities in a we...

DEBIAN-CVE-2026-98142

In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The cirrus-qemu driver relies on CIRRUSVRAMSIZE 4 MB to validate framebuffer sizes. However, during PCI probe, the driver mapped BAR0 without verifying that its size matches...

CVE-2026-97541

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: don't store usbdeviceid usbdeviceid is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driverdata can be easily retrieved from usbdevice, so just store driverdata...

CVE-2026-98142

The Linux kernel contains a vulnerability in the cirrus-qemu driver where it fails to verify that the PCI BAR0 resource size matches the expected CIRRUS_VRAM_SIZE (4 MB) during the probe process. If a device with a BAR0 smaller than 4 MB is bound, the driver may allow the creation of framebuffers...

CVE-2026-98142

In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The cirrus-qemu driver relies on CIRRUSVRAMSIZE 4 MB to validate framebuffer sizes. However, during PCI probe, the driver mapped BAR0 without verifying that its size matches...

CVE-2026-98018

In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...

CVE-2026-97973 net: macb: destroy the phylink instance on the probe error path

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

EUVD-2026-86827

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

CVE-2026-97539

The Linux kernel contains a vulnerability in the xusbatm driver where the code incorrectly relies on id table pointer arithmetic . When dynamic IDs are involved, the usb_device_id parameter resides on the heap, causing pointer arithmetic to result in a wildly out of bound index. To resolve this, ...

CVE-2026-98142: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The cirrus-qemu driver relies on CIRRUSVRAMSIZE 4 MB to validate framebuffer sizes. However, during PCI probe, the driver mapped BAR0 without verifying that its size matches...

Linux Distros Unpatched Vulnerability : CVE-2026-93225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup...

PT-2026-98523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the AFS component of the Linux kernel. The function afs fs probe fileserver fails to properly preserve the old address list when fetching the curren...

PT-2026-98631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically affecting corsair-cpro. The function ccp debugfs init registers debugfs files using private data from a devm allocated ccp. If the...

PT-2026-98632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the corsair-cpro hardware monitoring hwmon driver where the ccp debugfs init function registers debugfs files before the hwmon device register with info function is...

PT-2026-98681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the MCTP I3C implementation where the mctp i3c probe function releases the busdevs lock prematurely after locating a matching bus. If a concurrent I3C NOTIFY B...

PT-2026-98712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the is cmpxchg insn function only matches BPF ATOMIC mode. When bpf convert ctx accesses rewrites an atomic operation on...