The vulnerability of the panfrost_ioctl_madvise() function in the drivers/gpu/drm/panfrost/panfrost_drv.c driver module, which is part of the Direct Rendering Infrastructure (DRI) support driver for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panfrostioctlmadvise function in the drivers/gpu/drm/panfrost/panfrostdrv.c driver module related to the Linux kernel’s Direct Rendering Infrastructure DRI support mechanism is associated with improper cleaning or release of resources. Exploiting this vulnerability could...

The vulnerability of the fec_drvremove() function in the drivers/net/ethernet/freescale/fec_main.c file of the Ethernet network adapter driver for the Freescale Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fecdrvremove function in the drivers/net/ethernet/freescale/fecmain.c file of the Ethernet network adapter driver for the Freescale Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability cou...

Linux Distros Unpatched Vulnerability : CVE-2026-23324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: usb: etases58x: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before...

The vulnerability of the be_cmd_read_port_transceiver_data() function in the drivers/net/ethernet/emulex/benet/be_cmds.c module of the Linux kernel’s Ethernet adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the becmdreadporttransceiverdata function in the drivers/net/ethernet/emulex/benet/becmds.c file, a driver for supporting Ethernet network adapters in the Linux operating system, stems from the copying of buffers without checking the size of the input data a classic buffer...

The vulnerability in the `float_to_int()` function of the drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c file of the Linux kernel subsystem for user interface devices’ driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the es58x_alloc_rx_urbs() function in the drivers/net/can/usb/etas_es58x/es58x_core.c module of the Linux network device driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the es58xallocrxurbs function in the drivers/net/can/usb/etases58x/es58xcore.c module of the Linux network device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the hclge_set_vlan_filter() function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...

The vulnerability of the `nvme_fc_create_association()` function in the drivers/nvme/host/fc.c module of the Linux operating system’s NVME kernel driver allows a attacker to cause a service failure.

The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the amdgpu_userq_restore_worker() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c driver of the Direct Rendering Infrastructure (DRI) module for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpuuserqrestoreworker function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...

EUVD-2026-10618

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

The vulnerability of the dmar_parse_one_rhsa() function in the drivers/iommu/intel/dmar.c file of the Linux operating system’s IOMMU driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmarparseonerhsa function in the drivers/iommu/intel/dmar.c file of the Linux operating system’s IOMMU driver is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

Microsoft Windows Ancillary Function Driver for WinSock 访问控制错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a accessibility driver developed by Microsoft for Winsock. There is an access control vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...

The vulnerability of the i40e_validate_queue_map() function in the drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i40evalidatequeuemap function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacke...

PT-2026-24303

Уязвимость драйвера Windows Ancillary Function Driver for WinSock операционных систем Windows связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

📄 ThreatFire System Monitor 4.7.0.53 Kernel‑Mode Arbitrary Process Termination

This Metasploit module terminates the Windows Defender process MsMpEng.exe by sending a specific IOCTL to the TfSysMon driver. ============================================================================================================================================= | Title : ThreatFire System...

Vulnerability of the qat_dh_compute_value() function in the drivers/crypto/qat/qat_common/qat_asym_algs.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing a hacker to cause a service failure.

Vulnerability of the qatdhcomputevalue function in the drivers/crypto/qat/qatcommon/qatasymalgs.c module – The driver for the Linux kernel’s cryptographic accelerator is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2026-3437 Improper Restriction of Operations within the Bounds of a Memory Buffer in Portwell Engineering Toolkits

An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...

CVE-2026-3437

CVE-2026-3437 affects Portwell Engineering Toolkits (version 4.8.2). The issue is an improper restriction of operations within the bounds of a memory buffer in the Portwell Toolkits driver, enabling a local authenticated attacker to read and write arbitrary memory. Exploitation could lead to priv...

CVE-2026-20423

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...