CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...

CVE-2020-15780-exploit

American Unsigned Language by zx2c4 These are two exploits to disable kernel lockdown via ACPI table injection. american-unsigned-language.sh is for Ubuntu 18.04 Bionic's 4.15 kernel with their custom patches and uses one technique. CVE-2019-20908. american-unsigned-language-2.sh is for...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1783414723)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1783414723 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit...

CVE-2026-100072

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. This vulnerability can lead to a Denial of Service DoS or system instability due to unsafe reference handling during platform device creation. Because the kernel fails to acquire a reference to the...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1760546935)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760546935 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr- deref in az6027i2cxfer W...

CVE-2026-97456

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. When parsing ACPI Machine Language AML bytecode, a missing boundary check allows an out-of-bounds memory read. An attacker capable of supplying crafted ACPI tables could exploit this flaw to trigger a kernel cras...

CVE-2026-97446

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface component. When the system processes a malformed ACPI package provided by firmware with an unresolvable reference, the kernel dereferences a NULL pointer without prior validation. This issue leads to a kernel...

CVE-2026-97444

A flaw was found in the Linux kernel. Missing boundary checks within the ACPICA ACPI Component Architecture subsystem allow out-of-bounds memory access when parsing ACPI bytecode. An attacker capable of supplying malformed ACPI tables can trigger this vulnerability, leading to a kernel crash and ...

ROS-20260929-73-0190

The vulnerability of the acpinswalknamespace function in the drivers/acpi/acpica/nswalk.c driver of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2026-93788

A flaw was found in the Linux kernel's iwlwifi wireless driver. When processing Advanced Configuration and Power Interface ACPI data, the driver does not properly validate the revision index of the WiFi Global Dynamic SAR WGDS table before performing a bit-shift calculation. An invalid revision...

CVE-2026-100839

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

CVE-2026-100839

In versions before 1.18.0 , the Contrast confidential-computing runtime for Kubernetes is vulnerable to an AML injection attack (known as "BadAML"). An attacker controlling the host can pass malicious, Turing-complete AML bytecode via ACPI tables to the guest firmware (OVMF) and the Linux kernel....

CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

SUSE CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

DEBIAN-CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

UBUNTU-CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

CVE-2026-100072 ACPI: platform: Use acpi_bus_get_primary_device()

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...