EUVD-2026-106990

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-114038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing perce...

PT-2026-120166

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-101481

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

CVE-2026-101483

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

CVE-2026-101482

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

CVE-2026-101483

A vulnerability exists in the Device Management and Support component of Oracle Secure Backup (affected versions 19.1.0.0.0 and 19.1.0.1.0 ). A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the software. Successful exploitation can lead to a c...

CVE-2026-101482

A vulnerability exists in the Device Management and Support component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the software, potentially resulting ...

CVE-2026-101481

A vulnerability exists in the Device Management and Support component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise and potentially take over Oracle Secure Backu...

CVE-2026-93085

A flaw was found in the ARM System Control and Management Interface SCMI firmware within the Linux kernel. This vulnerability occurs because the system fails to properly reject out-of-range Device Tree DT protocol identifiers. A local attacker could exploit this by providing a malformed 32-bit DT...

CVE-2026-93054

A flaw was found in the Linux kernel. When a User-space I/O UIO device fails to register, a pointer to memory that has already been released can remain active. A local user could exploit a race condition during this process. This could lead to the system attempting to access freed memory,...

CVE-2026-90389

A flaw was found in the Linux kernel. A concurrency issue in the Multiple Device MD subsystem's handling of memallocnoiosave tokens can occur during concurrent suspend sysfs writes. This allows a task to return to userspace while still within a PFMEMALLOCNOIO scope, enabling another task to resto...

CVE-2026-98481

A flaw was found in the Linux kernel's Near Field Communication NFC Port-100 driver. An attacker connecting a malicious USB device can provide a response frame whose declared length exceeds the actual received data size. This flaw causes an out-of-bounds memory read during frame validation, which...

CVE-2026-90401

A flaw was found in the Linux kernel's Multiple Device MD RAID personalities, specifically raid1, raid10, and raid456. This vulnerability arises from incomplete support for the REQNOWAIT flag during write operations. When one mirror succeeds and another fails with an -EAGAIN error, the MD driver...

CVE-2026-90400

A flaw was found in the Linux kernel's Multiple Device MD driver. A race condition exists where the system may attempt to remove or replace RAID array devices while they are still actively being used for input/output operations. This can lead to a null pointer dereference, causing the system to...

Possible new Cellebrite iPhone Radio Zero-Day

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks AU from here on, not to be confused with the "advanced unlocking services" they've marketed for years. A press release from earlier this year confirms AU is a new product...

iOSForensic

iOSForensic iosForensic is a python tool to help in forensics analysis on iOS. It get files, logs, extract sqlite3 databases and uncompress .plist files in xml. Installation Simply clone this git repository and install dependencies. Dependencies Linux OpenSSH sshpass sqlite3 python = 2.6...

CVE-2026-98474

A flaw was found in the Linux kernel's s390 PCI subsystem. This flaw can lead to a Denial of Service DoS due to a missing device lock during PCI Peripheral Component Interconnect error recovery. When error recovery status is reported without proper locking, concurrent device operations can access...