OutOfTune

OutOfTune Inspired by the original Pytune, OutOfTune registers a rogue device in Entra ID, enrolls it into Intune MDM, and checks the resulting compliance state. Only supports Windows devices as this was my main goal, might add additional ones in the future. Accompanying blog:...

EUVD-2026-118542

Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-109469

Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-109469

A critical authorization bypass vulnerability exists in Entra Device Registration due to a user-controlled key. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a CVSS v3.1 base score of 10.0 , indicating high impact on confidentiality, integri...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthreadrun may fail and return an error pointer; however, sgpprobe stores this error and returns success, resulting in the device being registered without its IAQ thread...

PT-2026-138478

Name of the Vulnerable Software and Affected Versions Microsoft Entra Device Registration affected versions not specified Description An authorization bypass exists in the Microsoft Entra Device Registration Service due to a flaw involving a user-controlled key. This allows unauthenticated remote...

Entra Device Registration Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network...

KLA91393 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-109469 Exploitation Related products Microsoft-Entra-ID Entra-Device-Registration CVE list CVE-2026-109469 critical Solution Install...

CVE-2026-98944

A flaw was found in the Linux kernel's Steam Controller HID Human Interface Device driver. This issue allows a local user to cause a Denial of Service DoS by triggering a device registration failure. During an unsuccessful registration sequence, the driver fails to properly unregister the battery...

CVE-2026-99019

A flaw was found in the Linux kernel's SCSI changer driver, which can lead to a Denial of Service DoS. The driver retains unreleased device references after reading changer configuration data, preventing removed devices from being properly cleaned up. An attacker or local user interacting with SC...

CVE-2026-98620

A flaw was found in the Linux kernel's MediaTek Ethernet driver mtkethsoc. This issue allows a local attacker to cause a Denial of Service DoS by triggering a failure during the network device registration probe sequence. When registration fails, the driver's error cleanup path frees registered...

DEBIAN-CVE-2026-98750

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

CVE-2026-98750 tty: fix saved termios reset race

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

CVE-2026-98750 tty: fix saved termios reset race

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

CVE-2026-98750

The Linux kernel contains a vulnerability in the tty subsystem where a race condition between closing a TTY (saving its termios) and the re-registration of a device can occur. This happens when a minor number is reused for a different device, potentially leading to a use-after-free condition. To ...

EUVD-2026-103835

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

CVE-2026-98750: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.12 has a security vulnerability. This vulnerability arises from the failure to reset the saved termios state during device registration. Additionally, some TTY drivers do not ensure that the next device number is no longer used. When the TTY is closed and termios is...

Linux Distros Unpatched Vulnerability : CVE-2026-98750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path when failing to register devices on the TEE bus contains a bug that leads to a kernel panic as follows: 15.398930 Unable to handle kernel paging reque...