CVE-2026-89505

A flaw was found in the Linux kernel's RDMA/uverbs component. Malformed input from a provider in the legacy write path can cause the uverbsgethandlerfn function to dereference an uninitialized pointer. This can lead to a system crash, resulting in a denial of service...

CVE-2026-89505

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without methodelm The legacy write path dispatches through a uverbsapiwritemethod, but the uverbsattrbundle passed to provider code does not have an ioctl method element. If malformed provider...

CVE-2026-89505

CVE-2026-89505 is a vulnerability in the Linux kernel RDMA/uverbs subsystem. In the legacy write() path, the uverbs_attr_bundle passed to provider code does not contain an ioctl method element. If malformed provider input causes the common uverbs validation code to emit an error message, uverbs_g...

EUVD-2026-76411

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without methodelm The legacy write path dispatches through a uverbsapiwritemethod, but the uverbsattrbundle passed to provider code does not have an ioctl method element. If malformed provider...

CVE-2022-21974

CVE-2022-21974：RMSRoamingSecurity 中未初始化指针释放导致远程代码执行 根本原因 RMSRoamingSecurity!ATL::CComCreator ::CreateInstance 构造函数分配并初始化了一个 CRmsRoamingSecurity 对象（0x3470 字节），但未能完全初始化其状态。 例如，在偏移量 0x3458 处有一个未初始化的指针，当析构函数被调用时（在 CRmsRoamingSecurity::Cleanup 中）会被释放： root@kitploit: 0:000...

CVE-2022-21971

CVE-2022-21971：prauthproviders 中未初始化指针的释放 根本原因 WapAuthProvider::CreateInstance 构造函数分配并初始化了一个 WapAuthProvider 对象（0x78 字节），但未能完全初始化其状态。 偏移量 0x50 处的指针未初始化，并在析构函数（WapAuthProvider::WapAuthProvider）被调用时被释放： root@kitploit: prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f3078 488b4b50...

PT-2026-90221

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method elm The legacy write path dispatches through a uverbs api write method, but the uverbs attr bundle passed to provider code does not have an ioctl method element. If malformed...

CVE-2022-21971

CVE-2022-21971：prauthproviders 中未初始化指针的释放 根本原因 WapAuthProvider::CreateInstance 构造函数分配并初始化了一个 WapAuthProvider 对象（0x78 字节），但未能完全初始化其状态。 偏移量 0x50 处的指针未初始化，并在调用析构函数时被释放（在 WapAuthProvider::WapAuthProvider 中）： root@kitploit: prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f3078 488b4b...

CVE-2022-21971-Windows-Runtime-RCE

CVE-2022-21971: prauthproviders 中的未初始化指针释放 根因 WapAuthProvider::CreateInstance 构造函数分配并初始化了一个 WapAuthProvider 对象（0x78 字节），但未能完全初始化其状态。 偏移 0x50 处的指针未初始化，并在析构函数被调用时（在 WapAuthProvider::WapAuthProvider 中）被释放： root@kitploit: prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f3078 488b4b5...

cve-2016-0040

cve-2016-0040 此poc针对由Meysam Firozi @R00tkitSmm发现并利用的cve-2016-0040漏洞 该poc有助于在Windows内核中将任意数据写入任意地址 更多信息请参见我的博客： http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-pointer/...

The vulnerability of the nsim_dev_trap_skb_build() function in the drivers/net/netdevsim/dev.c module of the network device drivers for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nsimdevtrapskbbuild function in the drivers/net/netdevsim/dev.c file of the Linux kernel’s network device driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fwctl_exit() function in the drivers/fwctl/main.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the fwctlexit function in the drivers/fwctl/main.c file of the Linux kernel module involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability in the virtio_gpu_remove() function of the drivers/gpu/drm/virtio/virtgpu_drv.c driver, a component of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the virtiogpuremove function in the drivers/gpu/drm/virtio/virtgpudrv.c driver of the Direct Rendering Infrastructure DRI subsystem in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the bpf_prog_test_run_skb() function in the net/bpf/test_run.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xe_display_init_early() function in the drivers/gpu/drm/xe/display/xe_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the xedisplayinitearly function in the drivers/gpu/drm/xe/display/xedisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the qcom_slim_ngd_ctrl_probe() function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

K000163141: NLnet Labs Unbound vulnerability CVE-2026-42959

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163141)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163141 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098935 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...