261 matches found
CVE-2026-38763
CVE-2026-38763 Una vulnerabilità in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 consente a un attaccante locale di causare una negazione del servizio nel kernel...
-Detection-and-Mitigation-for-CVE-2022-1679
-Rilevamento-e-Mitigazione-per-CVE-2022-1679 Descrizione ath9k è un driver del kernel Linux che supporta i chip Atheros. È stata riscontrata una vulnerabilità use-after-free nel driver dell'adattatore wireless Atheros del kernel Linux, nel modo in cui un utente forza la funzione...
CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly
In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...
CVE-2026-80520
A flaw was found in the ovpn module of the Linux kernel. The ovpncryptokillkey function incorrectly assumes that both crypto key slots are always populated. This can lead to a NULL dereference if a peer has only one installed key or if the function attempts to remove a key that is not present. A...
CVE-2026-80539
A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...
CVE-2017-6074-DOS
CVE-2017-6074 - DoS-Only-Exploit Linux DCCP Kernel-Panik Dieses Repository bietet eine modifizierte Version des ursprünglichen CVE-2017-6074-Exploits Use-After-Free in der DCCP-Subsystem des Linux-Kernels, die nur dazu entwickelt wurde, die Auswirkungen eines Denial of Service DoS zu demonstriere...
CVE-2026-80541
A flaw was found in the Linux kernel's drm/amdgpu component. A local user could exploit improper validation of Graphics Execution Manager GEM CREATE domain combinations. By combining specific memory domains CPU|GTT|VRAM with special hardware domains DOORBELL, GDS, GWS, or OA, a user could trigger...
CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()
mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...
EUVD-2026-66134
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
VulnCheck KEV: CVE-2026-36425
An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...
Linux Distros Unpatched Vulnerability : CVE-2026-80185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098669)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098669 advisory. An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special...
Linux Distros Unpatched Vulnerability : CVE-2026-80541
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations...
DEBIAN-CVE-2026-80185
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
CVE-2026-80185
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
CVE-2026-80185 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
CVE-2026-80185
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
CVE-2026-80185
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
CVE-2026-20731
A flaw was found in the Intel NPU Driver. Due to improper buffer restrictions, an unprivileged local attacker with authenticated user access could exploit this vulnerability. This could lead to a denial of service DoS condition, impacting the availability of the system. Mitigation No mitigation i...