3324 matches found
CVE-2020-14372
CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...
CVE-2020-15780-exploit
American Unsigned Language by zx2c4 These are two exploits to disable kernel lockdown via ACPI table injection. american-unsigned-language.sh is for Ubuntu 18.04 Bionic's 4.15 kernel with their custom patches and uses one technique. CVE-2019-20908. american-unsigned-language-2.sh is for...
CVE-2026-98673
A flaw was found in the Linux kernel's PAC1934 driver. This vulnerability can result in a Denial of Service DoS due to a kernel crash caused by an invalid memory access. When the driver processes device configuration labels from the ACPI Advanced Configuration and Power Interface firmware tables,...
CVE-2026-64603
A flaw was found in the Linux kernel's intel-hid driver. A race condition can occur in the ACPI Advanced Configuration and Power Interface notify handler when processing tablet-mode events on convertible or detachable devices. If two events are processed concurrently, the input device may be...
CVE-2026-93132
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI implementation for RISC-V architectures. Specifically, the riscvacpiaddprtdep function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates,...
CVE-2026-93114
A flaw was found in the Linux kernel. A vulnerability exists in the platform/surface: acpi-notify component where a platform driver can be forced to match a device lacking an ACPI companion object. This can lead to a NULL pointer dereference when the sanprobe function attempts to access a...
CVE-2026-92522
A flaw was found in the Linux kernel's handling of ACPI Advanced Configuration and Power Interface tables, specifically within the IOAPIC I/O Advanced Programmable Interrupt Controller hotplug lookup. The system did not properly validate the bounds of MADT Multiple APIC Description Table and MAT...
CVE-2026-92521
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI PCI subsystem. This use-after-free vulnerability occurs because the driverdata pointer is not properly cleared when an acpipciroot object is freed during certain error handling paths or removal operations. A...
Linux Distros Unpatched Vulnerability : CVE-2026-98841
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which t...
CVE-2026-98841
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
UBUNTU-CVE-2026-98841
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
SUSE CVE-2026-98841
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
DEBIAN-CVE-2026-98841
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
CVE-2026-98841
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
CVE-2026-98841 virt: vmgenid: set driver_data before registering notification handlers
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
CVE-2026-98841 virt: vmgenid: set driver_data before registering notification handlers
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
EUVD-2026-103781
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...
CVE-2026-98841
The Linux kernel contains a vulnerability in the virt: vmgenid component where notification handlers are registered before driver_data is assigned. This improper ordering causes a kernel NULL pointer dereference and a system panic if an interrupt or ACPI notification occurs during the probe path....
CVE-2026-98673
In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...
CVE-2026-98841: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driverdata before registering notification handlers Both probe paths register their notification handler before assigning driverdata, which the handler dereferences. In the devicetree path, the notification IRQ...