CVE-2026-36355

CVE-2026-36355：Realtek rtl819x Jungle SDK —— 通过调试 ioctl 实现未认证的内核内存读写 CVE ：CVE-2026-36355 CWE ：CWE-782, CWE-787, CWE-200 发现者 ：Daniil Gordeev 披露日期 ：2026-05-03 概述 Realtek rtl819x 非主线（out-of-tree）“Jungle SDK” 中的 rtl8192cd Wi-Fi 内核驱动程序暴露了两个 IOCTL —— writemem（0x89F5）和...

PT-2026-37043

Name of the Vulnerable Software and Affected Versions Realtek rtl819x Jungle SDK versions prior to v3.4.14B Description The rtl8192cd Wi-Fi kernel driver fails to perform access control checks on the write mem ioctl 0x89F5 and read mem ioctl 0x89F6 debug handlers. These handlers are included in...