firmware-workshop

Hands-on Firmware Extraction, Exploration, and Emulation Join us for this hands-on demo of Unblob, the flexible firmware extractor. During this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the services in...

EUVD-2026-113765

The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting...

CVE-2026-22110 Missing authentication check on POST/PUT requests

The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting...

CVE-2026-22110 Missing authentication check on POST/PUT requests

The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting...

CVE-2026-22110

The web server is vulnerable to a missing authentication check on POST and PUT requests. An unauthenticated attacker can exploit this to reboot the charger . Additionally, by brute-forcing the configid , an attacker can set the service password and subsequently modify any system setting. No speci...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146683)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146683 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146298 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142704)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142704 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The powersupply framework is not actually designed to have long-lived kernel references to powersupply devices. Specifically, unregistering a powersupply...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: Also search for ‘phys’ handle. When passing ‘phys’ in the device tree to describe the USB PHY handle which is the recommended approach according to Documentation/devicetree/bindings/usb/ci-hdrc-usb2.txt,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

The Linux kernel before version 6.2.9 has a race condition, which can lead to a use-after-free issue in the driver/power/supply/da9150-charger.c file. This issue occurs when a physically nearby attacker disconnects a device...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Power: Supply: gpio-charger: Fixed the issue related to setting charge current limits. The issue involved devices that allow the lowest charge current limit to be greater than zero. If the requested charge current limit is below...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fixed the null check for powersupplygetbyname. In the cpcapusbdetect function, the powersupplygetbyname function may return NULL instead of an error pointer. To prevent potential null pointer...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: Fixed a refcount leak in the isfullcharged function. In isfullcharged, the powersupplygetbyname function is called to obtain a reference to the fuelgauge power supply. If the voltage check uV =...

PT-2026-94743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the isp1704 charger power supply component where the remove path unregisters the notifier and power supply without waiting for queued or running work. This can lead to...

PT-2026-94742

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sc2731 charger power supply component where the remove path unregisters the notifier but fails to cancel queued or running work before the driver data allocated vi...

Astra Linux – Vulnerability in Linux 5.10, Linux

A issue was discovered in the Linux kernel through version 5.16-rc6. The function freechargerirq in drivers/power/supply/wm8350power.c lacks a free variable for WM8350IRQCHGFASTRDY, which is registered in wm8350initcharger...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A issue was discovered in the Linux kernel before version 6.2.9. A use-after-free was found in the bq24190remove function in the file drivers/power/supply/bq24190charger.c. This could allow a local attacker to cause the system to crash due to a race condition...

SUSE CVE-2026-89468

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...

SUSE CVE-2026-89471

In the Linux kernel, the following vulnerability has been resolved: power: supply: crosusbpd-charger: bound the EC-reported port count crosusbpdchargerprobe reads two port counts from the EC and uses one of them, numchargerports, as the loop bound when populating a fixed-size array: struct portda...