CVE-2026-3437 Improper Restriction of Operations within the Bounds of a Memory Buffer in Portwell Engineering Toolkits

An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...

CVE-2026-3437

CVE-2026-3437 affects Portwell Engineering Toolkits (version 4.8.2). The issue is an improper restriction of operations within the bounds of a memory buffer in the Portwell Toolkits driver, enabling a local authenticated attacker to read and write arbitrary memory. Exploitation could lead to priv...

CVE-2026-20423

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...

The vulnerability of the vmxnet3_process_xdp() function in the drivers/net/vmxnet3/vmxnet3_xdp.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the vmxnet3processxdp function in the drivers/net/vmxnet3/vmxnet3xdp.c file of the Linux kernel device driver framework is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-20436

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID:...

The vulnerability of the stmmac_request_irq_multi_msi() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_main.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the stmmacrequestirqmultimsi function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet network adapter driver for the Linux operating system from STMicroelectronics is related to the reutilization of previously freed memory. Exploiting this...

The vulnerability of the msm_dsi_modeset_init() function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the msmdsimodesetinit function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to...

Exploit for Improper Privilege Management in Microsoft

Windows Privilege Escalation ========================== A col...

The vulnerabilities of the functions ucsi_init() and ucsi_unregister() in the driver drivers/usb/typec/ucsi/ucsi.c file of the UCSI driver for the Linux operating system allow a malicious actor to cause service failure remotely.

The vulnerability of the functions ucsiinit and ucsiunregister in the UCSI driver’s drivers/usb/typec/ucsi/ucsi.c file is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the dev_add_physical_location() function in the drivers/base/physical_location.c file of the Linux kernel device driver module allows a attacker to cause a service failure.

The vulnerability of the devaddphysicallocation function in the drivers/base/physicallocation.c file of the Linux kernel device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the nouveau_connector_create() function in the drivers/gpu/drm/nouveau/nouveau_connector.c file of the Nouveau driver for Direct Rendering Infrastructure (DRI) graphics cards of NVIDIA’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nouveauconnectorcreate function in the drivers/gpu/drm/nouveau/nouveauconnector.c file of the Nouveau graphics driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise...

The vulnerability of the lpfc_issue_els_flogi() function in the drivers/scsi/lpfc/lpfc_els.c module of the Linux SCSI device support driver allows a attacker to cause a service failure.

The vulnerability of the lpfcissueelsflogi function in the drivers/scsi/lpfc/lpfcels.c file of the Linux SCSI device support driver leads to a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important: nvidia-imex

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of servic...

The vulnerability of the adv7842_cp_log_status() function in the drivers/media/i2c/adv7842.c file of the Linux kernel’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel’s multimedia device driver is related to the lack of checking of the returned value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2026-21238

CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...

The vulnerability of the acpi_processor_get_lpi_info() function in the driver/acpi/processor_idle.c file of the Linux operating system’s ACPI kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acpiprocessorgetlpiinfo function in the drivers/acpi/processoridle.c module of the Linux operating system’s ACPI driver lies in the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the virtnet_rq_alloc() function in the drivers/net/virtio_net.c module of the Linux kernel’s network device support driver allows a attacker to cause a service failure.

The vulnerability of the virtnetrqalloc function in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

Exploit for CVE-2024-0070

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability NVIDI...

The vulnerability of the ffa_device_remove() function in the drivers/firmware/arm_ffa/bus.c file of the Linux kernel firmware module allows a hacker to cause a service failure.

The vulnerability of the ffadeviceremove function in the drivers/firmware/armffa/bus.c file of the Linux kernel firmware module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the vduse_vdpa_set_vq_affinity() function in the drivers/vdpa/vdpa_user/vduse_dev.c driver for vDPA devices in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vdusevdpasetvqaffinity function in the drivers/vdpa/vdpauser/vdusedev.c driver for vDPA devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...