Aquarius L311 Driver Access Control

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

CVE-2021-27965

CVE-2021-27965 Proof of concept for CVE-2021-27965 Stack-based Buffer Overflow NOTE: I probably will not update this any further there is still a chance I will finish it. I currently have the ability to cleanly overwrite the instruction pointer, but I believe that this is enough to prove I have t...

cve-2016-5345

CVE-2016-5345 Privilage escalation in Qualcomm FM Radio Driver. Exploit tested on ASUS device. Some privileges already required to open the vulnerable device driver. Original CVE discovered by Aravind Machiry donfos of Shellphish Grill Team...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: blk-mq: Fixed a possible memory leak when registering the ‘hctx’ variable failed. There is one issue that arises during fault injection tests: An unreferenced object with a size of 512 bytes: bash comm "insmod", pid 308021,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: uio: uiodmemgenirq: Fixed an issue where the unlock operation was missed in irq configuration. The commit b74351287d4b “uio: fixed a bug in uiodmemgenirqirqcontrol”. corrected the code so that disableirq was called without...

ROS-20261014-73-0006

The vulnerability of the handleTransactionDone function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s alphabetic device driver lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

CVE-2026-90180

A flaw was found in the Linux kernel's mtip32xx block device driver. A local user with access to an already open block device could exploit a synchronization issue between ioctl handlers and device removal. This could lead to a use-after-free vulnerability, where the system attempts to access...

ROS-20261013-73-0097

The vulnerability of the ipcimeminit function in the drivers/net/wwan/iosm/iosmipcimem.c file of the Linux kernel’s network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

ROS-20261013-73-0315

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261013-73-0082

The vulnerability of the spiimxremove function in the drivers/spi/spi-imx.c module of the Linux operating system’s SPI device driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261013-73-0249

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261012-73-0223

The vulnerability of the getmanufinfo function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261012-73-0045

The vulnerability of the bondrcvvalidate function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20261012-73-0028

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261012-73-0225

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

CVE-2026-98239

A flaw was found in the Linux kernel's LAN743x network device driver. This vulnerability allows an attacker capable of transmitting network traffic to an affected system to cause a Denial of Service DoS or memory corruption. The issue occurs because the driver attempts to update checksum...

ROS-20261009-73-0512

The vulnerability of the gethallocinst function in the drivers/usb/gadget/function/fsubset.c file of the Linux USB device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20261009-73-0462

The vulnerability of the ov5647probe function in the drivers/media/i2c/ov5647.c file of the Linux kernel’s multimedia device driver is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...