The vulnerability of the aiptekirq() function in the drivers/input/tablet/aiptek.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js 紹介 以下のすべての内容は、Interrupt Labs が公開した記事で取り上げられている UC ブラウザのエクスプロイトに関するものです。 はじめに このエクスプロイトは、CVE-2022-1364 の RCE バグを含む旧バージョンの UC ブラウザに関連しています。このバグは 2024 年後半に UC ブラウザで修正されました。このエクスプロイトを実行するために追加の依存関係はありません。 ブラウザとエクスプロイトのインストール手順については、提供されている記事のリンクをご参照ください。...

kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

CVE-2026-98353

A flaw was found in the Linux kernel's erdma Elastic Remote Direct Memory Access driver. A local user could cause a Denial of Service DoS through a system deadlock during concurrent queue creation and hardware interrupt handling. Because internal queue updates do not use interrupt-safe locking, a...

wch-ch56x-lib

wch-ch56x-lib このライブラリは、WCH569 チップをベースとする Facedancer USB エミュレーションライブラリの新しいバックエンドである Hydradancer と並行して構築されました。 このプロジェクトには信頼性の高いドライバが必要であり、WCH のサンプルには多くの機能が欠落していたか、未テストのままでした。 このライブラリは、tests/ 内のベンチマーク/整合性テストを使用してテストされた USB3、USB2、HSPI、および SerDes ドライバを提供します。wch-ch56x-bsp...

CVE-2026-103670 Gitea trusted workflow cancellation by unapproved fork runs

When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval. Because fork pull request runs are inserted under the base repository, a user who can open a pull request from a fork could...

EUVD-2026-93203

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmacirq acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this...

CVE-2026-98275

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmacirq acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this...

CVE-2026-98275

The Linux kernel contains a vulnerability in the cortina ethernet driver regarding how it handles the RX overrun interrupt . The gmac_irq() function incorrectly acknowledges the interrupt using the RX descriptor error bit from status register 0, instead of the bit reported in status register 4. F...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fixed a potential memory leak in vfiointxenable If vfioirqctxalloc fails, it will lead to a ‘name’ memory leak...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Power: Supply: bq27xxx-i2c: Do not free non-existent IRQs. The bq27xxx i2c-client may not have an IRQ; in such cases, client-irq will be 0. The bq27xxxbatteryi2cprobe function already includes a check for client-irq, which wraps...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Created a persistent INTx handler. There exists a vulnerability where the eventfd for INTx signaling can be deconfigured. This causes the IRQ handler to be unregistered, but it still allows eventfds to be signaled with ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel before version 6.9, a trusted-to-non-trusted hypervisor can inject Virtual Interrupt 29 VC at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: A race condition between handleposixcputimers and posixcputimerdel has been fixed. If a task that exits without autoreaping has already called exitnotify and calls handleposixcputimers from the IRQ, it can be...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii 非常に非常に非常に非常に非常に非常に長い割り込みでシステム管理モード（SMM）を悪用する。 概要 実は、SMM（すべてのx86 CPUのバックグラウンドで不可視に動作する、安全で特権的な実行環境）を、途方もなく長く実行される機械語命令だけで破壊できることが判明した。 SMMでは、すべてのコアが同時にSMM内かSMM外のどちらかにいなければならない。この前提がなければセキュリティモデルは機能しない。あるスレッドがSMMに入ると、他のすべてのスレッドもSMMに入るように強制されるからだ。...

CVE-2026-26399-Disclosure

CVE-2026-26399: ArduinoCoreSTM32（旧バージョン）におけるスタックベースのUse-After-Return 概要 ArduinoCoreSTM32 のバージョン 1.7.0 より前の旧バージョンには、スタックベースのuse-after-returnの脆弱性が存在します。 この問題は pwmstart の実装にあり、TIMHandleTypeDef...

CVE-2026-76737

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-97929

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...

CVE-2026-97503

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS or memory corruption due to a stack-based buffer overflow in the interrupt proc filesystem interface. When creating or removing directory entries for interrupt requests, the temporary buffer is too small ...

CVE-2026-97600

A flaw was found in the Linux kernel's CC2520 radio driver. During device removal, an interrupt handler can queue background work after the driver's private data has been released, resulting in a use-after-free condition. A local user with privileges to disconnect or unbind the device could explo...