80560 matches found
CVE-2026-84854 Out of Bound Write on WibuKey for Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE-2026-84854 Out of Bound Write on WibuKey for Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
DEBIAN-CVE-2026-98325
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set up the TX info early to fix failure paths The previous commit 2c51457d930f "wifi: mac80211: free ack status frame on TX header build failure" cleaned up the leak, but still left the code a bit messy and the...
DEBIAN-CVE-2026-98266
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...
AZL-106260 CVE-2026-98266 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...
CVE-2026-98266
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...
AZL-106170 CVE-2026-98195 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: fix broadcast stations deallocation On the error path of il4965up, ildeallocbcaststations clears only ILSTAUCODEACTIVE, leaving ILSTABCAST set. This causes the same broadcast stations to be deallocated again by...
CVE-2026-98266
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...
CVE-2026-98319
In the Linux kernel, the following vulnerability has been resolved: drm: Fix drmpendingvblankevent leak in error path for outfenceptr When an outfenceptr is provided but DRMMODEPAGEFLIPEVENT is not set, a drmpendingvblankevent will be allocated. If later, there is an allocation failure or another...
UBUNTU-CVE-2026-98266
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...
lenovo-dispatcher-poc
Lenovo Dispatcher PoC 이것은 lenovo dispatcher 드라이버LnvMSRIO.sysCVE-2025-8061를 익스플로잇하기 위한 기본 개념 증명입니다. 취약점은 Luis Casvella가 발견했습니다출처: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. 이 PoC의 주요 아이디어는 읽기/쓰기 프리미티브만을 악용하여 ntoskrnl.exe에서 시스템 토큰을 탈취하는 것입니다. 이를 위해 PoC는...
EUVD-2026-93311
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211joinmesh acquires a channel context and then calls ieee80211startmesh, which can fail. In that case, the chanctx isn't released then interface removal will attempt...
CVE-2026-98275
The Linux kernel contains a vulnerability in the cortina ethernet driver regarding how it handles the RX overrun interrupt . The gmac_irq() function incorrectly acknowledges the interrupt using the RX descriptor error bit from status register 0, instead of the bit reported in status register 4. F...
CVE-2026-98266 ALSA: core: Fix potential UAF after asynchronous card release
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources assigned to the card via sndcardfree, and it synchronizes with the whole release procedure. However, when the card is...
CVE-2026-98266
The Linux kernel contains a use-after-free vulnerability in the ALSA core component. The issue occurs when a sound card is released asynchronously via snd_card_free_when_closed(), such as in USB-audio drivers . While snd_card_disconnect() gates new accesses, in-flight tasks may still access the u...
CVE-2026-25270
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-25273
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25272
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...
ThrottleStopPPL
ThrottleStopPPL 一个概念验证工具，通过利用ThrottleStop驱动程序（CVE-2025-7771）中的漏洞，管理Windows Server 2022上的受保护进程轻量级（PPL）保护级别。 概述 该工具演示了通过ThrottleStop驱动程序暴露的任意物理内存读写功能实现权限提升。它允许通过直接操作内核内存结构来修改进程保护级别。 功能 任意物理内存读写 通过Superfetch进行虚拟到物理地址转换 EPROCESS结构操作 任意进程的PPL保护级别修改 使用方法 PPLmanager.exe -p -v 选项 -p - 要修改的进程ID -v -...