CVE-2026-98971 gpio: exar: initialize the ID before registering its cleanup

In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devmaddactionorreset invokes the cleanup action immediately when registering the action fails. gpioexarprobe currently stores the allocated ID in exargpio only after...

CVE-2026-98971 gpio: exar: initialize the ID before registering its cleanup

In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devmaddactionorreset invokes the cleanup action immediately when registering the action fails. gpioexarprobe currently stores the allocated ID in exargpio only after...

PT-2026-121948

In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devm add action or reset invokes the cleanup action immediately when registering the action fails. gpio exar probe currently stores the allocated ID in exar gpio only...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.11. It stems from gpioexarprobe failing to save allocated IDs prior to performing registration cleanup; as a result, ID 0 is released upon registration failure. This may lead to the leakage of allocated IDs and subsequent release of ID 0 f...

CVE-2025-68140: Incorrect Authorization

EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However, if no session has been registered, the default value is 0. Therefore, a message...

CVE-2025-40016: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each Unit and Terminal within the video function is assigned a unique...

EUVD-2007-6471

Malware in sbrugna...

Unspecified vulnerability in Linux kernel (CNVD-2024-39374)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle the use of ID 0 endpoints after multiple re-creations. No details of the...

CVE-2024-46711 mptcp: pm: fix ID 0 endp usage after multiple re-creations

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'localaddrused' and 'addaddraccepted' are decremented for addresses not related to the initial subflow ID0, because the source and destination addresses of the initial...

CVE-2024-46711 mptcp: pm: fix ID 0 endp usage after multiple re-creations

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'localaddrused' and 'addaddraccepted' are decremented for addresses not related to the initial subflow ID0, because the source and destination addresses of the initial...

PT-2024-12181

Name of the Vulnerable Software and Affected Versions MIB3 infotainment affected versions not specified Description The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to "/logs" URI, when the id parameter equals to zero. This issue allows an...

CVE-2023-28898: Improper Handling of Parameters

The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when the id parameter equals to zero. This issue allows an attacker connected to the in-vehicle Wi-Fi network to cause denial-of-service of the infotainment system, when the certain...

PT-2022-35109 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the wifi ath11k driver in the Linux Kernel. It is noted that the problem occurs when disconnected, specifically with an issue finding a peer with peer id 0. The actual...

Citrix WEM Agent Host Service Initialization failed - event id 0

Wem Agent fails to start - in the event log we see the error: Event id 0 - Agent host Service Initialization Failed...

PT-2019-11993

Name of the Vulnerable Software and Affected Versions KBPublisher version 6.0.2.1 Description The issue concerns SQL Injection, which can be exploited through specific parameters in the application. The vulnerable parameters include entry id0 in the "admin/index.php?module=report" endpoint, id in...

PT-2019-18188

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.6.3.4 F5 BIG-IP versions 12.1.0 through 12.1.3.7 F5 BIG-IP versions 13.0.0 through 13.1.1.3 F5 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue is related to the processing of certain SNMP...

CVE-2019-6606: Missing Release of Memory after Effective Lifetime

On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory...

Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation Exploit

Exploit for windows platform in category local exploits Windows: SSPI Network Authentication Session 0 EoP Platform: Windows 10 1803/1809 not tested earlier versions Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: Session boundary Summary: Performing an NTLM...

PT-2019-16625

Name of the Vulnerable Software and Affected Versions Waimai Super Cms version 20150505 Description An issue was discovered that allows blind SQL Injection via the id0 parameter to the "/product" URI. This affects the ProductAction.class.php file in the web/Lib/Action directory. Recommendations F...

CVE-2019-3577: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...