2120454 matches found
CVE-2026-90048 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in nicreateattrlist nicreateattrlist allocates a fixed buffer of alalignedrecordsize == recordsize bytes and then walks every attribute of the primary MFT record, writing one ATTRLISTENTRY p...
CVE-2021-22210
0x01 Prefacio Aviso: Este proyecto es solo para fines de aprendizaje e intercambio, ¡no lo utilice para pruebas no autorizadas ilegales! Registro de actualizaciones 10.30 Se añadió el pool de proxies de burp Se reescribieron los argumentos de la línea de comandos Se añadió la detección por lotes ...
CVE-2026-90032 media: usbtv: keep device alive while ALSA card exists
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exists The ALSA PCM callbacks store the driver state in pcm-privatedata. An open PCM file can outlive USB disconnect because usbtvaudiofree uses sndcardfreewhenclosed. The disconnec...
CVE-2026-90032 media: usbtv: keep device alive while ALSA card exists
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exists The ALSA PCM callbacks store the driver state in pcm-privatedata. An open PCM file can outlive USB disconnect because usbtvaudiofree uses sndcardfreewhenclosed. The disconnec...
CVE-2026-90033
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
CVE-2026-90033 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
EUVD-2026-80640
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exists The ALSA PCM callbacks store the driver state in pcm-privatedata. An open PCM file can outlive USB disconnect because usbtvaudiofree uses sndcardfreewhenclosed. The disconnec...
EUVD-2026-80641
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
CVE-2026-90032
This is a use-after-free vulnerability in the Linux kernel's usbtv (USB TV) media driver. The ALSA PCM callbacks store driver state in pcm->private_data, and because usbtv_audio_free() uses snd_card_free_when_closed(), an open PCM file can outlive a USB disconnect. The disconnect path can then...
CVE-2026-90033
CVE-2026-90033 is an out-of-bounds write in the Linux kernel 's ALSA usb-audio subsystem, specifically in the snd_usbmidi_us122l_output() function. The root cause is that the function uses a fixed transfer count of 2 on speeds below high-speed without checking ep->max_transfer. When a device (...
CVE-2026-90032
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exists The ALSA PCM callbacks store the driver state in pcm-privatedata. An open PCM file can outlive USB disconnect because usbtvaudiofree uses sndcardfreewhenclosed. The disconnec...
CVE-2026-90033 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...
CVE-2026-90013
CVE-2026-90013 is a use-after-free vulnerability in the Linux kernel's ftrace tracing subsystem . When a trace options file is opened, the kernel does not take a reference to the underlying trace_array , so a concurrent removal of the tracing instance by another task can free the options descript...
EUVD-2026-80621
In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening options file The options files do not take the tracearray reference for the options they represent. This could cause a use-after-free kernel crash if one of these files is opened by...
CVE-2026-90013
In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening options file The options files do not take the tracearray reference for the options they represent. This could cause a use-after-free kernel crash if one of these files is opened by...
CVE-2026-90013 tracing: Take trace_array reference when opening options file
In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening options file The options files do not take the tracearray reference for the options they represent. This could cause a use-after-free kernel crash if one of these files is opened by...
CVE-2026-90013 tracing: Take trace_array reference when opening options file
In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening options file The options files do not take the tracearray reference for the options they represent. This could cause a use-after-free kernel crash if one of these files is opened by...
CVE-2026-90001 HID: bpf: serialize device reference release in struct_ops destroy path
In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in structops destroy path hidbpfopsdestroydevice and hidbpfunreg can race on the same registration reference, double-putting struct hiddevice and freeing it while hiddestroydevice stil...
CVE-2026-90002
CVE-2026-90002 is a use-after-free race condition in the Linux kernel's ftrace subsystem, specifically in the trace instance files set_ftrace_filter and set_ftrace_notrace. When these files are opened, a small race window exists where a concurrent rmdir of the trace instance can free the ftrace_o...
CVE-2026-90002 ftrace: Take trace_array reference before accessing its ftrace_ops
In the Linux kernel, the following vulnerability has been resolved: ftrace: Take tracearray reference before accessing its ftraceops The trace instance files setftracefilter and setftracenotrace was updated to work with specific trace instances tracearrays. The issue is that when these files are...