135 matches found
CVE-2026-68299
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a Geneve-encapsulated packet the device can set them based on the inner header...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm: Do not allow userspace to trigger kernel warnings in drmgemchangehandleioctl Since GEM bo handles are of type u32 in the uapi, and the internal implementation uses idralloc, which uses integer ranges. Passing a new handle th...
ebpf-cve-analysis
eBPF CVE Analysis !polito-logoresources/images/logopolito...
CVE-2026-33840
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
USN-8094-5 linux-raspi vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
The vulnerability of the functions thc_i2c_subip regsave() and thc_i2c_subip regs_restore() in the driver/hid/intel-thc-hid/intel-thc/intel-thc-dev.c module of the Linux kernel’s user interface subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions thci2csubip regsave and thci2csubip regs Restore in the driver/hid/intel-thc-hid/intel-thc/intel-thc-dev.c module of the Linux kernel’s user interface device subsystem is related to accessing memory beyond the permissible buffer data size due to arithmetic addre...
kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...
kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...
CVE-2026-20870 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
PT-2025-52950
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the PCI/DOE subsystem of the Linux kernel when CONFIG DEBUG OBJECTS is enabled. Specifically, the work struct associated with a completed pci doe task is not...
Ubuntu Pro FIPS 16.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-7865-1)
"The remote Ubuntu Pro FIPS 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7865-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor...
USN-7853-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...
EUVD-2018-4170
Malware in sbrugna...
EUVD-2018-4169
Malware in sbrugna...