423752 matches found
The vulnerability in the i915_perf_add_config_ioctl() function of the drivers/gpu/drm/i915/i915_perf.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the i915perfaddconfigioctl function in the drivers/gpu/drm/i915/i915perf.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacke...
The vulnerability of the amba_device_release() function in the drivers/amba/bus.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the ambadevicerelease function in the drivers/amba/bus.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the btf_type_is_fwd() function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.
The vulnerability of the btftypeisfwd function in the kernel/bpf/btf.c module, which supports BPF interpreter for Linux kernel, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...
The vulnerability of the pppol2tp_recv() function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the pppol2tprecv function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel is related to the use of memory after it is freed, as a result of a pointer being dereferenced that has reached its expiration time. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the `remove_phb_dynamic()` function in the `arch/powerpc/platforms/pseries/pci_dlpar.c` module exposes the security of PowerPC-based Linux operating systems, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the removephbdynamic function in the arch/powerpc/platforms/pseries/pcidlpar.c module relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the hyperv_init() function in the arch/x86/hyperv/hv_init.c module, which supports the x86 kernel of the Linux operating system, allows a attacker to cause a service failure.
The vulnerability of the hypervinit function in the arch/x86/hyperv/hvinit.c module, which is part of the Linux operating system’s x86 kernel support, relates to incorrect handling of the absence of a special element. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the invalidate_dquots() function in the fs/quota/dquot.c file of the Linux kernel file system allows a attacker to trigger a service failure.
The vulnerability of the invalidatedquots function in the fs/quota/dquot.c file of the Linux kernel file system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the checkCond_jmp_op() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.
The vulnerability of the checkCondjmpop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux operating systems, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the sof_ipc4_route_setup() function in the sound/soc/sof/ipc4-topology.c module allows a hacker to cause a service failure in the Linux operating system’s SoC audio kernel.
The vulnerability of the sofipc4routesetup function in the sound/soc/sof/ipc4-topology.c module of the Linux SoC audio support module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the smcr_serv_conf_first_link() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smcrservconffirstlink function in the net/smc/afsmc.c module, part of the SMC protocol family in the Linux operating system’s kernel, is related to improper release of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...
The vulnerability of the ishtp_bus_remove_all_clients() function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem allows a attacker to cause a service failure.
The vulnerability of the ishtpbusremoveallclients function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the tracepoint_add_func() function in the kernel/tracepoint.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the tracepointaddfunc function in the kernel/tracepoint.c module of the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-85065
Exterro FTK Imager before 8.3 contains an XML external entity XXE injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP...
PT-2026-85127
Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...
PT-2026-85125
Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...
PT-2026-85217
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
ALSA-2026:63014 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: s390/cpumsf: Handle CPU hotplug remove during sampling CVE-2024-57849 kernel: smc91x: fix broken irq-context in PREEMPTRT CVE-2025-71132 kernel: bonding: alb: fix UAF in rlbarprecv during...
...[ More ]
This Metasploit module exploits an unauthenticated command execution vulnerability in MCPJam Inspector. The /api/mcp/connect endpoint accepts a JSON serverConfig object containing a command and argument list used to start an MCP server. A remote attacker can abuse this endpoint to execute arbitra...