HyperV

HyperV Almost one year ago, I wrote a PoC for CVE-2017-0075 after had read Jordan Rabet's blackhat talk. But I've no time to make a working exploit:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/hyperv: validated resolutioncount and fixed the WIN8 fallback mechanism. A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 bypasses the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array during the parsing loop. The...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fixed a possible memory leak in mousevscprobe If hidadddevice returns an error, it should call hiddestroydevice to free the hiddev that was allocated in hidallocatedevice...

CVE-2026-90138

A flaw was found in the Linux kernel's vsock implementation. A local attacker can trigger a failed self-connect on a vsock socket, which leaves a stale error state. Subsequent legitimate connection attempts to the same socket are then incorrectly rejected, leading to a Denial of Service DoS. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer that is not initialized yet. If the KVP or VSS daemon starts before the VMBus channel’s ringbuffer is fully initialized, we can encounter a panic as follows: hvutils: Registering th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host sends messages called SYNTHHIDINITIALDEVICEINFO, which contain a HID descriptor followed by the report descriptor bytes. The function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fixed the flushtlbrange function when it is used to zap normal PMD entries PMD entries that point to page tables, along with the PTE entries in the pointed-to page table. In the arm64 version of flushtlbrange, there is a...

Podman Arbitrary Command Execution

The vulnerability of the pkg/machine/hyperv/stubber.go file of the OCI-container management and startup software Podman is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

PT-2026-94486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vsock implementation where the vsock accept function incorrectly checks the sk err variable of the listener socket. If a socket triggers a failed self-connect...

SUSE CVE-2026-80765

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

CVE-2026-80765

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

CVE-2026-80765

CVE-2026-80765 affects the Linux kernel 's Hyper-V synthetic HID driver. The function mousevsc_on_receive_device_info() trusts the bLength and wDescriptorLength fields in SYNTH_HID_INITIAL_DEVICE_INFO messages without verifying that the received VMBus packet actually contains both the HID descrip...

EUVD-2026-71408

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

CVE-2026-80765 HID: hyperv: validate initial device info bounds

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

CVE-2026-80765 HID: hyperv: validate initial device info bounds

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

Linux kernel Network Device Buffer Overflow DoS

The vulnerability of the netvsccopytosendbuf function in the drivers/net/hyperv.netvsc.c file of the Linux kernel network device driver is related to errors during pointer scaling. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-80765: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

Linux Distros Unpatched Vulnerability : CVE-2026-80765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor follow...

PT-2026-85606

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description The Hyper-V synthetic HID host provides SYNTH HID INITIAL DEVICE INFO messages containing a HID descriptor and report descriptor bytes. The mousevsc on receive device info function fails to...

PT-2026-91352

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTH HID INITIAL DEVICE INFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsc on receive device inf...