Lucene search
+L

52 matches found

Kitploit
Kitploit
•added 2026/10/18 8:50 p.m.•15 views

byd-dolphin-hacking

🚗 BYD Dolphin Head Unit — Research & Reverse Engineering Reverse engineering, documentation, and tooling for the BYD Dolphin 25/26 infotainment system DiLink 3, Android 10. Everything here was discovered through ADB exploration, APK decompilation, and CAN bus probing — no proprietary documentatio...

6.3AI score
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•11 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: byd – synchronize timer deletion before freeing private data. The byddisconnect function uses timerdelete before freeing the driver’s private data. This does not wait for a running bydcleartouch callback, which dereference...

7.8CVSS6.2AI score0.0012EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/08/27 10:43 a.m.•15 views

CVE-2026-80572

A flaw was found in the Linux kernel's byd input driver. A race condition exists during device disconnection where the byddisconnect function frees private data before ensuring that a timer callback, bydcleartouch, has completed. This can lead to the callback attempting to access memory after it...

7.8CVSS6.7AI score0.0012EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/27 6:31 a.m.•15 views

EUVD-2026-66487

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.5AI score0.0012EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/08/27 12:11 a.m.•11 views

SUSE CVE-2026-80572

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.4AI score0.0012EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/08/26 3:17 p.m.•14 views

AZL-97769 CVE-2026-80572 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.4AI score0.0012EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/26 3:17 p.m.•16 views

CVE-2026-80572

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS0.0012EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/08/26 3:17 p.m.•15 views

CVE-2026-80572

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.4AI score0.0012EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2026/08/26 3:17 p.m.•11 views

UBUNTU-CVE-2026-80572

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.7AI score0.0012EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/08/26 2:37 p.m.•50 views

CVE-2026-80572 Input: byd - synchronize timer deletion before freeing private data

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS0.0012EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/26 2:37 p.m.•89 views

CVE-2026-80572

CVE-2026-80572 is a use-after-free in the byd psmouse (touchpad) driver in the Linux kernel . During device disconnection, byd_disconnect() calls timer_delete() before freeing the driver's private data, but this does not wait for a potentially running byd_clear_touch() callback that dereferences ...

7.8CVSS6.4AI score0.0012EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/08/26 2:37 p.m.•9 views

CVE-2026-80572 Input: byd - synchronize timer deletion before freeing private data

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS5.8AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•18 views

PT-2026-82188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the byd disconnect function. The function uses timer delete before freeing the driver's private data, which fails to wait for a running byd clear touch callbac...

7.8CVSS6.9AI score0.0012EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•5 views

CVE-2026-80572: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.5AI score0.0012EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-80572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait...

7.8CVSS7AI score0.0012EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•7 views

CVE-2026-80572: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

7.8CVSS6.5AI score0.0012EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/19 6:16 p.m.•49 views

CVE-2025-61081

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

0.00029EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/19 12:00 a.m.•36 views

PT-2026-41983

Name of the Vulnerable Software and Affected Versions BYD Atto3 affected versions not specified Description An attacker can obtain a permanently available authentication key through a Brute Force attack. This key allows unauthorized flashing of the Electronic Parking Break EPB and Supplemental...

7.5CVSS5.8AI score0.00029EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/19 12:00 a.m.•17 views

CVE-2025-61081

In BYD Atto3, an attacker can obtain an authentication key through Brute Force attack, which is permanently available. The authentication key enables flash to the Electronic Parking Break EPB and Supplemental Restoration System SRS related ECUs...

5.9AI score0.00029EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/19 12:00 a.m.•93 views

CVE-2025-61081

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score0.00029EPSS
SaveExploits0References3
Rows per page
Query Builder