The vulnerability in the i915_perf_add_config_ioctl() function of the drivers/gpu/drm/i915/i915_perf.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the i915perfaddconfigioctl function in the drivers/gpu/drm/i915/i915perf.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacke...

The vulnerability of the checkCond_jmp_op() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the checkCondjmpop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux operating systems, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the `remove_phb_dynamic()` function in the `arch/powerpc/platforms/pseries/pci_dlpar.c` module exposes the security of PowerPC-based Linux operating systems, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the removephbdynamic function in the arch/powerpc/platforms/pseries/pcidlpar.c module relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the pppol2tp_recv() function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pppol2tprecv function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel is related to the use of memory after it is freed, as a result of a pointer being dereferenced that has reached its expiration time. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...

Oracle Linux 8 : ELSA-2026-61257-0: / iperf3 (ELSA-2026-612570)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-612570 advisory. 3.5-12.1 - Resolves: RHEL-236174 - Add JSON value checks for getparameters CVE-2026-71217 Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-71224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk...

The vulnerability of the tracepoint_add_func() function in the kernel/tracepoint.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tracepointaddfunc function in the kernel/tracepoint.c module of the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ishtp_bus_remove_all_clients() function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem allows a attacker to cause a service failure.

The vulnerability of the ishtpbusremoveallclients function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smcr_serv_conf_first_link() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smcrservconffirstlink function in the net/smc/afsmc.c module, part of the SMC protocol family in the Linux operating system’s kernel, is related to improper release of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...

The vulnerability of the pin_assignment_show() function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pinassignmentshow function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the invalidate_dquots() function in the fs/quota/dquot.c file of the Linux kernel file system allows a attacker to trigger a service failure.

The vulnerability of the invalidatedquots function in the fs/quota/dquot.c file of the Linux kernel file system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the hyperv_init() function in the arch/x86/hyperv/hv_init.c module, which supports the x86 kernel of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the hypervinit function in the arch/x86/hyperv/hvinit.c module, which is part of the Linux operating system’s x86 kernel support, relates to incorrect handling of the absence of a special element. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 9 : rhc (RHSA-2026:63130)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63130 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Linux Distros Unpatched Vulnerability : CVE-2026-71222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds...

Oracle Linux 8 : ELSA-2026-62144-0: / wget (ELSA-2026-621440)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621440 advisory. - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Fix CVE-2026-58471: buffer overflow in convertfname - Fix CVE-2026-58472: integer and...

RHCOS 4 : OpenShift Container Platform 4.17.57 (RHSA-2026:60018)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60018 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...

Linux Distros Unpatched Vulnerability : CVE-2026-71220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 認証されていないMobile MCPアクセスにより、Android画面データが露出し、ADBを介したリモートUI制御機能が提供される可能性があります。 ⚠️ セキュリティ通知 このリポジトリは、許可されたセキュリティ研究、脆弱性検証、防御的テスト、および管理された実験室環境のみを対象としています。 同梱のチェッカーは、非破壊的な認証境界チェック を実行するように設計されています。 以下のことは行いません ： 任意のMCPツールの実行 Androidデバイスの制御 実デバイスに対するADBコマンドの実行 スクリーンショットの取得...

OpenNebula-CVE-2025-56535

OpenNebula-CVE-2025-56535 Название эксплойта : OpenNebula 6.10.0.1 - Хранимый XSS межсайтовый скриптинг в атрибуте зоны Автор эксплойта : Mark Artamonov Сайт производителя : https://opennebula.io/ Протестировано на версии : OpenNebula 6.10.0.1 Уязвимые версии : OpenNebula Доказательство концепции...