reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow This repository contains the materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30. The contents of...

TOTOLINK/Realtek Routers - CAPTCHA Bypass

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

rtl8812au

Controlador de linux para RTL8812AU/21AU y RTL8814AU con modo monitor e inyección de tramas La rama master se basa en https://github.com/ulli-kroll/rtl8821au rama v4.3.22-beta/rework. Según rtwversion.c la versión real del controlador es 4.3.20. La rama v4.3.21 puede compilarse para el chipset...

CVE-2026-80999

A flaw was found in the Linux kernel's Realtek Digital Subscriber Line DSA driver. The driver incorrectly uses gpiodsetvalue instead of gpiodsetvaluecansleep for reset GPIO operations. This can lead to system warnings when the reset GPIO is managed by a sleeping controller, potentially causing...

AZL-100343 CVE-2026-80999 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

DEBIAN-CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999

CVE-2026-80999 affects the Linux kernel 's Realtek DSA driver (net: dsa: realtek). The root cause is that rtl83xx_reset_assert() and rtl83xx_reset_deassert() invoke the non-sleeping gpiod_set_value() for the reset GPIO. When that GPIO is backed by a sleeping controller such as an I2C I/O expander...

EUVD-2026-76322

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-51585

realtek poc rt26cx21x64.sys exploit Realtek PCIe GbE/2.5GbE/5GbE family Overview OID 0xFF816871 maps the nic's mmio bar into the calling proc's virtual addr space, MmLockedPagesSpecifyCache, reachable from um via \.\RealTekCardGUID This IOCTL 0x0012C818 is gated by a registry value DrvMode=4 Once...

CVE-2021-32537

CVE-2021-32537: Acceso fuera de los límites en RTKVHD64 que conduce a corrupción del pool. Este es un error que reporté a Realtek a principios de abril de 2021. El controlador afectado se llama RTKVHD64.sys y parece estar disponible en varios dispositivos de hardware convencional probé las...

PT-2026-90129

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod set value cansleep for reset GPIO rtl83xx reset assert and rtl83xx reset deassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Unauthenticated Kernel Memory Read/Write via Debug ioctls CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Discoverer : Daniil Gordeev Disclosed : 2026-05-03 Summary The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x out-of-tree "Jungle SDK"...

lg-webos-kexec

lg-webos-kexec Boot a custom Linux kernel on a rooted LG webOS TV via kexec — in RAM, no secure-boot bypass. Status: work-in-progress. A custom kernel can be staged and reaches userspace, but it does not yet stay up as a usable OS. Target LG 50UP81009LR webOS 6.5, Realtek RTD2875, armv7l. Rooted...