The vulnerability of the aiptekirq() function in the drivers/input/tablet/aiptek.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js 紹介 以下のすべての内容は、Interrupt Labs が公開した記事で取り上げられている UC ブラウザのエクスプロイトに関するものです。 はじめに このエクスプロイトは、CVE-2022-1364 の RCE バグを含む旧バージョンの UC ブラウザに関連しています。このバグは 2024 年後半に UC ブラウザで修正されました。このエクスプロイトを実行するために追加の依存関係はありません。 ブラウザとエクスプロイトのインストール手順については、提供されている記事のリンクをご参照ください。...

wch-ch56x-lib

wch-ch56x-lib このライブラリは、WCH569 チップをベースとする Facedancer USB エミュレーションライブラリの新しいバックエンドである Hydradancer と並行して構築されました。 このプロジェクトには信頼性の高いドライバが必要であり、WCH のサンプルには多くの機能が欠落していたか、未テストのままでした。 このライブラリは、tests/ 内のベンチマーク/整合性テストを使用してテストされた USB3、USB2、HSPI、および SerDes ドライバを提供します。wch-ch56x-bsp...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii 非常に非常に非常に非常に非常に非常に長い割り込みでシステム管理モード（SMM）を悪用する。 概要 実は、SMM（すべてのx86 CPUのバックグラウンドで不可視に動作する、安全で特権的な実行環境）を、途方もなく長く実行される機械語命令だけで破壊できることが判明した。 SMMでは、すべてのコアが同時にSMM内かSMM外のどちらかにいなければならない。この前提がなければセキュリティモデルは機能しない。あるスレッドがSMMに入ると、他のすべてのスレッドもSMMに入るように強制されるからだ。...

CVE-2026-26399-Disclosure

CVE-2026-26399: ArduinoCoreSTM32（旧バージョン）におけるスタックベースのUse-After-Return 概要 ArduinoCoreSTM32 のバージョン 1.7.0 より前の旧バージョンには、スタックベースのuse-after-returnの脆弱性が存在します。 この問題は pwmstart の実装にあり、TIMHandleTypeDef...

CVE-2026-76737

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-97929

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...

CVE-2026-97503

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS or memory corruption due to a stack-based buffer overflow in the interrupt proc filesystem interface. When creating or removing directory entries for interrupt requests, the temporary buffer is too small ...

CVE-2026-97600

A flaw was found in the Linux kernel's CC2520 radio driver. During device removal, an interrupt handler can queue background work after the driver's private data has been released, resulting in a use-after-free condition. A local user with privileges to disconnect or unbind the device could explo...

CVE-2026-97502

A flaw was found in the Linux kernel's DaVinci MultiMediaCard MMC driver. When processing hardware interrupt events such as read timeouts or communication errors, the driver accesses a data pointer without verifying that an active transfer structure exists. A local user or abnormal device conditi...

CVE-2026-93830

A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by sending high volumes of network traffic to an affected system. Under heavy packet load, the network controller exhausts its receive buffers and continuously fires hardware interrupts...

CVE-2026-98035

A flaw was found in the Linux kernel's BPF subsystem. When updating or deleting elements in resizable hash tables, the kernel directly releases special object fields rather than safely deferring their cancellation, which is not safe when running in Non-Maskable Interrupt NMI context. A local user...

CVE-2026-97515

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit master driver. On affected hardware, when a target device on the bus holds the data line low, the controller triggers an interrupt feedback loop during recovery attempts. This issue creates an interrupt storm that can...

CVE-2026-97993

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfdctxfdget error in configctx vhostvdpasetconfigcall swaps the eventfdctxfdget return value into v-configctx before checking it, so on failure the field briefly holds an ERRPTR: ctx = fd ==...

AZL-104534 CVE-2026-97993 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfdctxfdget error in configctx vhostvdpasetconfigcall swaps the eventfdctxfdget return value into v-configctx before checking it, so on failure the field briefly holds an ERRPTR: ctx = fd ==...

UBUNTU-CVE-2026-97993

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfdctxfdget error in configctx vhostvdpasetconfigcall swaps the eventfdctxfdget return value into v-configctx before checking it, so on failure the field briefly holds an ERRPTR: ctx = fd ==...

CVE-2026-97929 ALSA: usbusx2y: validate URB actual_length in interrupt callback

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transfer from a malfunctioning device would cause the handler to process...

CVE-2026-97929

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transfer from a malfunctioning device would cause the handler to process...

PT-2026-98573

In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lock before requesting IRQ uni reader init registers the shared IRQ before initializing reader-irq lock. A pending interrupt can invoke the handler while the lock is still uninitialized. Initialize the...

Linux Distros Unpatched Vulnerability : CVE-2026-97530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature qla27xxcopymultiplepkt and qla27xxcopyfpinpkt poll rspq-ringptr-signature for RESPONSEPROCESS...