CVE-2025-62454

这不是漏洞利用，只是POC root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffff808b75973000 BUGCHECKP2: 2 BUGCHECKP3: fffff803df12ddda BUGCHECKP4: 0 READADDRESS: ffff808b75973000 Special pool MMINTERNALCODE: 0 IMAGENAME: cldflt.sys MODULENAME: cldflt FAULTINGMODULE: fffff803df110000 cldflt PROCESSNAME:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed a kernel crash during module removal The driver incorrectly releases the client instance, and subsequent removal of the i40e module leads to a kernel crash. Reproducing the issue: 1. Perform an offline ethtool test...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ath10k: skipped ath10khalt during suspend for the driver state RESTARTING. A double-free crash occurs when FW recovery caused by wmi timeout/crash is followed by an immediate suspend event. FW recovery is triggered by...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: myrs: Fixed a crash in the error case In myrsdetect, cs-disableintr is a NULL pointer when privdata-hwinit fails with a non-zero value. In this case, myrscleanupcs will attempt to dereference a NULL pointer, causing the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not pass a stopped vif to the driver in .gettxpower. Avoid potentially crashing the driver due to uninitialized private data...

Linux Distros Unpatched Vulnerability : CVE-2026-89594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via...

DEBIAN-CVE-2026-89594

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...

CVE-2026-89594

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...

CVE-2026-89594

This Linux kernel vulnerability affects the OMAP SSI driver (hsi: omap_ssi_core). The driver allocates a synthetic HSI controller device via hsi_alloc_controller(), which bypasses the normal OF/platform device initialization path, leaving the embedded struct device DMA mask uninitialized . After ...

CVE-2026-89594 hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...

SUSE CVE-2026-72362

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

AZL-97832 CVE-2026-74734 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: A NULL pointer dereference occurred in xeptzapptesentry. The page-table walk framework might pass a NULL child pointer for unpopulated entries. The xeptzapptesentry function calls containerofchild before checking for...

CVE-2026-72362

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

CVE-2026-72362 drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry()

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

EUVD-2026-59261

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

CVE-2026-68372 usb: core: port: Deattach Type-C connector on component unbind

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

CVE-2026-68307

The CVE concerns the Linux kernel wifi driver mt76 (mt7925) where a reset/replay path replays firmware state for links tracked in mvif->valid_links. After MLO link changes or MCU timeout recovery, the driver bitmap can temporarily include a link whose mac80211 bss_conf has already gone away, l...

The vulnerability of the `vfio_ap_queue_devremove()` function in the `drivers/s390/crypto/vfio_ap_drv.c` driver file of the S390 Linux operating system’s cryptography driver, which allows a hacker to cause a service failure.

The vulnerability of the vfioapqueuedevremove function in the drivers/s390/crypto/vfioapdrv.c file of the Linux S390 platform’s cryptography driver lies in the pointer manipulation involved. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-64049 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params because those generations didn't support UBWC anyway, however it's still possible to query UBWC-related params...