EDRChoker

EDRChoker EDRChoker utiliza Quality of Service QoS basada en políticas para establecer límites de ancho de banda estrictos limitación en los agentes de Detección y Respuesta de Puntos Finales EDR, provocando que siempre superen el tiempo de espera — bloqueándolos efectivamente. Las reglas entran ...

external_libcap-Android10_r33_CVE-2023-2603

Esta es una biblioteca para obtener y establecer capacidades POSIX.1e anteriormente POSIX 6 del borrador 15. Esta biblioteca no habría sido posible sin la ayuda de Aleph1, Roland Buresund y Andrew Main, Alexander Kjeldaas. Se puede encontrar más información sobre las capacidades en el kernel de...

Rocky Linux 9.2 [CIQ] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ciqsa-2026_1426)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261426 advisory. This advisory aggregates security fixes for the dracut SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-6893. Tenable has extracted the preceding description blo...

PT-2026-98718

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC Intel AVS component where the snd hdac ext bus get ml capabilities function may fail without its return code being properly checked and accounted for. This...

PT-2026-94747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stride mismatch exists in the ath12k wmi mac phy caps parse function. The kzalloc function sizes the mac phy caps buffer using a clamped length, but the subsequent memcpy operation...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ceph: The “use after free” error was caught by KASAN at the line cephbuffergetarg-xattrbuf;. This means that the reference count could not be incremented before the memory was freed. In the same file, in the handlecapgrant...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: set devicecaps for 417. The videodevice for the MPEG encoder did not set devicecaps. This issue needs to be addressed; otherwise, the videodevice cannot be registered a WARNON message will be generated. This issue...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contains an out-of-bound read vulnerability in the xrdpcapsprocessconfirm-active function. There are no known workarounds for this issue. Users are advis...

CVE-2026-80993

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...

PT-2026-90371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ceph component of the Linux kernel. The kick flushing caps function iterates through the ci-i cap flush list using list for each entry but releas...

PT-2026-90123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the phylink inband caps function where the PCS returned by mac select pcs is only checked for NULL values. Because mac select pcs can also return an error pointer, the...

PT-2026-96609

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kick flushing caps on cf entry freed during unlock list for each entry iterates ci-i cap flush list but drops i ceph lock to send cap messages. During the unlock window, handle cap flush ack can acquire i ceph...

Allocation of Resources Without Limits or Throttling

Overview atomic-agents-stack is a Spec + reference implementation for vault-native, multi-runtime AI agents Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper handling of unknown models in the PRICING lookup within the...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

Neo9Root iQOO Neo9 PD2338C Unlocked Without Unlocking –...

CVE-2026-68204

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is...

CVE-2026-68204 media: vivid: check for vb2_is_busy() when toggling caps

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is...

CVE-2026-68204

CVE-2026-68204 affects the Linux kernel media subsystem (vivid driver). The vulnerability arises because vivid_update_format_cap/out() may be invoked to change formats while the capture/output queue is still busy, due to missing vb2_is_busy() checks when toggling CROP/COMPOSE/SCALE capabilities. ...

EUVD-2026-55305

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is...

CVE-2026-68160

Summary: CVE-2026-68160 is a pre-auth, out-of-bounds read vulnerability in the Linux kernel’s Ceph code path (ceph_handle_caps) caused by using attacker-controlled snap_trace_len to compute an end pointer without proper bounds checks. The issue can lead to out-of-bounds reads of encoded snap data...

CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it unconditionally to build a fake end pointer snaptrace + snaptracelen that ...