CVE-2026-31578

CVE-2026-31578: Linux kernel as102_usb driver race leads to use-after-free/double-free when a device is deregistered while an open FD remains. The crash arises from freeing as102_dev_t after usb_register_dev() and before the final FD is closed; the fix defers freeing to the .release() path, ensur...

CVE-2026-31566 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib amdgpuamdkfdsubmitib submits a GPU job and gets a fence from amdgpuibschedule. This fence is used to wait for job completion. Currently, the code drops the fence...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the hinicgetstats64 function in the drivers/net/ethernet/huawei/hinic/hinicmain.c file of the Linux kernel’s Ethernet network adapter driver is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component of the Windows operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

📄 Throttlestop Kernel Driver 3.0.0.0 Privilege Escalation

Throttlestop Kernel Driver version 3.0.0.0 suffers from a privilege escalation vulnerability. Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation Exploit Details: https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/ Date: 8/12/2025...

Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation

Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation Exploit Details: https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/ Date: 8/12/2025 Exploit Author: Xavi Beltran Vendor Homepage:...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the viasdprobe function in the drivers/mmc/host/via-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd

A flaw was found in the Linux kernel’s AMD Kernel Fusion Driver amdkfd within the drm subsystem. When either getnumsdmaqueues or getnumxgmisdmaqueues returned 0, the driver performed a bit shift where the number of bits shifted equaled the operand width. Such a shift is undefined behavior in C an...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

K000160637: Intel 800 Series Ethernet vulnerability CVE-2025-24303

Security Advisory Description Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2025-24303 Impact This...

pstrip64.sys Privilege Escalation

The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual address space. This primitive allows full read/write access to the system's physical RAM, enabling attackers to modify critical kernel structures and...

amdgpu Ring Failure

The vulnerability of the amdgpuringfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

Linux PCI Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the dwpcieepinit function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for the Linux operating system’s PCI controller module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the coregetv4 function in the drivers/media/platform/qcom/venus/pmhelpers.c file of the Linux multimedia device driver framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux SCSI Device Kernel Data Compromise

The vulnerability of the smpexecutetasksg function in the drivers/scsi/libsas/sasexpander.c file of the Linux SCSI device driver module is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ni_usb_read ni_usb_write DoS

The vulnerability of the niusbread and niusbwrite functions in the drivers/staging/gpib/niusb/niusbgpib.c module relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

DPLL kernel driver Heap Buffer Overflow DoS

The vulnerability of the dplldevicegetbyid function in the drivers/dpll/dpllcore.c module of the DPLL kernel driver of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the erdmammap function in the drivers/infiniband/hw/erdma/erdmaverbs.c file of the Linux operating system’s kernel driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow a remote attacker to cause service interruptio...

Linux GTP Encapdestroy Buffer Overflow

The vulnerability of the gtpencapdestroy function in the drivers/net/gtp.c driver for Linux kernel network devices is related to the use of memory after release. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel driver Heap Buffer Overflow DoS

The vulnerability of the hnsrocemmap function in the drivers/infiniband/hw/hns/hnsrocemain.c file of the Linux operating system’s kernel driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow a remote attacker to cause service failures...