CVE-2026-24085

Technical details about CVE-2026-24085 are not publicly available in the provided documents; the memory corruption description is noted but no affected products, affected versions, root cause specifics, or fixes are disclosed. Monitor for updates.

CVE-2026-24085 Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable...

PT-2026-45641

Memory Corruption when processing display command line information due to improper initialization of a variable...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. There is a security vulnerability in Qualcomm Chipsets, which stems from improper variable initialization. This vulnerability may lead to memory corruption when processing command-line information...

Intel Xeon Scalable Processors 安全漏洞

Intel Xeon Scalable Processors are scalable server central processing units CPUs developed by the American company Intel. There are security vulnerabilities in Intel Xeon Scalable Processors, which stem from improper initialization and may lead to information leakage...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper initialization of certain local variables during replay requests, potentially leading to...

The vulnerability of the cdev_device_add() function in the fs/char_dev.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdevdeviceadd function in the fs/chardev.c file of the Linux kernel file system is related to improper initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-31689

A flaw was found in the EDAC/mc module of the Linux kernel. An error in the ordering of operations within the edacmcalloc function can lead to a situation where a device's release function is called before the device is fully initialized. This improper initialization can result in a kernel warnin...

AZL-84404 CVE-2026-31689 affecting package kernel for versions less than 6.6.137.1-1

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path will call putdevice which will end up calling the device's release function. However, the init ordering is wrong...

The vulnerability of the user_mem_abort() function in the arch/arm64/kvm/mmu.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the usermemabort function in the arch/arm64/kvm/mmu.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions xp_init_dma_info() and xp_dma_map() in the net/xdp/xsk_buff_pool.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions xpinitdmainfo and xpdmamap in the net/xdp/xskbuffpool.c module of the Linux kernel are related to improper initialization. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2025-57835

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory...

The vulnerability of the nfqnl_build_packet_message() function in the net/netfilter/nfnetlink_queue.c module of the netfilter component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the nfqnlbuildpacketmessage function in the net/netfilter/nfnetlinkqueue.c module of the netfilter component of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tt_add_tz_work_fn() function in the drivers/thermal/testing/zone.c module of the Linux kernel temperature control driver allows a hacker to cause a service failure.

The vulnerability of the ttaddtzworkfn function in the drivers/thermal/testing/zone.c module of the Linux kernel temperature control driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blkcg_css_online() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the blkcgcssonline function in the block/blk-cgroup.c module, which supports the block-level kernel in Linux, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the vmbus_device_register() function in the drivers/hv/vmbus_drv.c module of the support driver for Microsoft HyperV Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the vmbusdeviceregister function in the drivers/hv/vmbusdrv.c module of the Microsoft HyperV Linux kernel support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-0940

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code...

The vulnerabilities of the functions __mptcp_close_ssk() and mptcp_worker() in the net/mptcp/protocol.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mptcpclosessk and mptcpworker functions in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the mlx5_esw_vport_disable() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5eswvportdisable function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the kvm_xen_init_vcpu() function in the arch/x86/kvm/xen.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kvmxeninitvcpu function in the arch/x86/kvm/xen.c module of the virtualization subsystem on the x86-based Linux kernel platform is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...