10025 matches found
GhostLock-GOT-W29
GhostLock GOT-W29 HUAWEI MatePad Pro 11（GOT-W29，SM8250 / Snapdragon 870，HarmonyOS 4.x， kernel 4.19.157-perf+）的 CVE-2026-43499 提权适配。 Current status: A 路线真机完成：合法 private root cred，SELinux 保持 u:r:shell:s0 持久 root broker：@glsu 完整 PTY root shell：Ctrl-C、方向键、后台作业控制均可用 arbitrary read 使用独立 random/uuid...
CVE-2026-36957
CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Server CVE ID: CVE-2026-36957 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The...
sweyntooth_bluetooth_low_energy_attacks
SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...
CVE-2026-98832
A flaw was found in the Linux kernel's block control group blk-cgroup subsystem. When associating block I/O requests with control groups, the kernel prematurely re-enables interrupts while internal locks are still held. A local user can trigger this flaw during storage operations, causing an...
CVE-2026-98818
A flaw was found in the Linux kernel. When freeing memory through the slab allocator, the system may attempt to wake the kernel swap daemon while an internal scheduler lock is already held. This unsafe sequence can trigger a circular locking dependency and cause a system deadlock. A local user...
EUVD-2026-108843
In the Linux kernel, the following vulnerability has been resolved: gve: fix napidisable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napidisable and napienable. However, the netdev lock has already been acquired before ndobpf is calle...
CVE-2026-99048
In the Linux kernel, the following vulnerability has been resolved: gve: fix napidisable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napidisable and napienable. However, the netdev lock has already been acquired before ndobpf is calle...
CVE-2026-99048
The Linux kernel contains a deadlock vulnerability within the GVE component when attempting to disable XSK pools . The root cause is that GVE calls the unlocked versions of napi_disable and napi_enable while the netdev lock is already held due to support for queue management operations. This resu...
CVE-2026-98939
The Linux kernel contains a vulnerability where a possible deadlock occurs on systems with a discrete GPU . The root cause is an x86 commit that introduced an mmap_read_lock() in kernel page protection munging code. This creates a circular locking dependency because the huge vmap code holds the s...
EUVD-2026-108911
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmapreadlock to...
CVE-2026-98871
The Linux kernel contains a potential deadlock vulnerability within the crypto: ccp component during the SEV init failure path . Specifically, the function __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false, even though the parent function has already acqu...
EUVD-2026-108717
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path sevplatforminithandleinitexpath calls rmpmarkpagesfirmware with locked=false while the parent function of initexpath already acquired the sevcmdmutex. In the case of an...
CVE-2026-98871
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path sevplatforminithandleinitexpath calls rmpmarkpagesfirmware with locked=false while the parent function of initexpath already acquired the sevcmdmutex. In the case of an...
dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CLEANSTART-2026-YF38908 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection
CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-56855 and CVE-2026-78662.
Summary golang.org/x/crypto is used by the Scheduling Service. CVE-2026-56855 and CVE-2026-78662. Vulnerability Details CVEID:CVE-2026-56855 DESCRIPTION: Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, ...