sony-vp-extract

Sony WH-1000XM4 Voice Pack Extractor Decrypt and extract the voice guidance MP3 prompts from Sony WH-1000XM4 encrypted firmware files. The AES-128-CBC key was extracted by dumping the he...

buds-audit

buds-audit Version 1.0.0 Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Scans for nearby devices, fingerprints known-affected Airoha-based chipsets, and probes for unauthenticated GATT access...

Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...

CVE-2026-80617

A flaw was found in the Linux kernel's net: airoha driver. An incorrect memory allocation size for the foechecktime array can lead to a heap buffer overflow. When the airohappefoeverifyentry function is called with a specific hash value, it writes beyond the intended buffer. This out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-80617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

UBUNTU-CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

UBUNTU-CVE-2026-80632

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996inittxqueues When MT76NPU and CONFIGNETMEDIATEKSOCWED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996inittxqueues will dereference a NULL WED pointer. Fix...

CVE-2026-80617 net: airoha: fix foe_check_time allocation size

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80617

CVE-2026-80617 is a heap buffer overflow in the Linux kernel's airoha PPE (Packet Processing Engine) network driver. The foe_check_time buffer is declared as a u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry(...

EUVD-2026-67493

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-80617 net: airoha: fix foe_check_time allocation size

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

Linux Distros Unpatched Vulnerability : CVE-2026-68356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock ...

CVE-2026-68330

A flaw was found in the Linux kernel's airoha network driver. This vulnerability arises from an incorrect configuration of Direct Memory Access DMA for the Network Processing Unit NPU mailbox buffer. Specifically, the system incorrectly maps the buffer for data transfer only to the device, even...

CVE-2026-68332

A flaw was found in the airoha network driver within the Linux kernel. This vulnerability, a use-after-free, occurs because the airohappedeinit function fails to properly synchronize memory deallocation with ongoing operations. An attacker could potentially exploit this to cause system instabilit...

CVE-2026-68356

A flaw was found in the Linux kernel's airoha watchdog driver. This vulnerability occurs when the clock frequency is zero, causing the driver to attempt a division by zero. This can lead to a system crash, resulting in a denial of service for the affected system...

CVE-2026-68356

In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdtfreq as a divisor directly in...

DEBIAN-CVE-2026-68356

In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdtfreq as a divisor directly in...