207 matches found
smm_usbrt_poc
UsbRt SMM Privilege Elevation This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. All you need is CHIPSEC Framework installed. And don't forget to put...
CVE-2026-89920
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 component. This vulnerability arises from the incorrect reinjection of channel-subsystem damage machine checks into the guest virtual machine, which are intended for the host system. This misdirection can lead to memory...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46022)
In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read in ibmasmhandlemouseinterrupt ibmasmhandlemouseinterrupt performs an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeds REMOTEQUEUESIZE 60. A compromised service...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read in ibmasmhandlemouseinterrupt ibmasmhandlemouseinterrupt performs an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeds REMOTEQUEUESIZE 60. A compromised service...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path calls putdevice, which ultimately invokes the device’s release function. However, the initialization order is...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-80727
A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...
CVE-2026-89920
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
AZL-101664 CVE-2026-89920 affecting package kernel for versions less than 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
DEBIAN-CVE-2026-89920
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
CVE-2026-89920 KVM: s390: Fix memory corruption by not reinjecting CK machine checks
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
PT-2026-93561
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue in the KVM s390 component allows memory corruption due to the reinjection of CK machine checks. Channel-subsystem damage machine checks are intended for the host channel...
Linux Distros Unpatched Vulnerability : CVE-2026-89920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest...
UBUNTU-CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-64510 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...
SUSE CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-64510: Use After Free
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...
DEBIAN-CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...