4797 matches found
uc_browser_poc_CVE-2022-1364
UCBrowserExploit.js Introducción Todo el contenido a continuación se refiere al exploit del navegador UC explorado en este artículo publicado por Interrupt Labs. Primeros pasos Este exploit se relaciona con versiones anteriores del navegador UC que incluyen el error de RCE de CVE-2022-1364. Este...
wch-ch56x-lib
wch-ch56x-lib Esta biblioteca fue desarrollada junto con Hydradancer, un nuevo backend para la librería de emulación USB Facedancer basado en el chip WCH569. Se necesitaban controladores confiables para este proyecto y muchas características faltaban en los ejemplos de WCH o no habían sido...
smiiiiiiiiiiiiiiii
smiiiiiiiiiiiiiiii Explotando el Modo de Gestión del Sistema con una interrupción muy muy muy muy muy muy muy larga. Resumen Resulta que puedes romper el SMM — el entorno de ejecución seguro y ultra privilegiado que se ejecuta de forma invisible en segundo plano en cada CPU x86 — con nada más que...
CVE-2026-89727
A flaw was found in the Kernel-based Virtual Machine KVM for ARM64 arm64 architecture. A malicious guest operating system can provide an interrupt ID INTID that is outside the expected range to the GICv2 Generic Interrupt Controller version 2 during interrupt deactivation. This can trigger a...
Linux Distros Unpatched Vulnerability : CVE-2026-89440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: via-sdmmc: stop card-detect handling on probe failure requestirq registers the SD card-detect interrupt and the probe enables it before mmcaddhost runs. If...
Linux Distros Unpatched Vulnerability : CVE-2026-80950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous model to transfer data. It prepares a struct...
CVE-2026-80950
A flaw was found in the Linux kernel's Renesas I3C driver. This driver uses an asynchronous model for data transfers. When a transfer times out, the associated memory is freed. However, if an interrupt occurs after the memory is freed but before the interrupt handler is aware, it can attempt to...
DEBIAN-CVE-2026-89600
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer to range.pos in the heap-allocated permission event so...
CVE-2026-89475
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...
DEBIAN-CVE-2026-89475
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...
AZL-100836 CVE-2026-89440 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure requestirq registers the SD card-detect interrupt and the probe enables it before mmcaddhost runs. If mmcaddhost fails, the error path only unmaps the registers and...
CVE-2026-89440
In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure requestirq registers the SD card-detect interrupt and the probe enables it before mmcaddhost runs. If mmcaddhost fails, the error path only unmaps the registers and...
DEBIAN-CVE-2026-89440
In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure requestirq registers the SD card-detect interrupt and the probe enables it before mmcaddhost runs. If mmcaddhost fails, the error path only unmaps the registers and...
DEBIAN-CVE-2026-80953
In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI state, transfer queue list and transfer queue lock are initialized. A...
DEBIAN-CVE-2026-80950
In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous model to transfer data. It prepares a struct renesasi3cxfer, enqueues it, and waits for completion. The interrupt...
CVE-2026-80950
In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous model to transfer data. It prepares a struct renesasi3cxfer, enqueues it, and waits for completion. The interrupt...
EUVD-2026-76501
In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...
EUVD-2026-76381
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...
CVE-2026-89475 power: supply: bq24257: fix use-after-free on remove
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...
CVE-2026-89475 power: supply: bq24257: fix use-after-free on remove
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler c...