EUVD-2026-71415

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80772

CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...

KeePass-CVE-2023-32784-Exploitation-and-Defense

Vulnerabilidad de fuga de memoria en KeePass CVE-2023-32784: Arquitectura de explotación y defensa Objetivo Analizar la vulnerabilidad CVE-2023-32784 en KeePass Password Safe v2.53, demostrar la extracción de la contraseña maestra mediante el volcado de memoria y diseñar controles robustos de...

CVE-2026-13148

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

CVE-2026-13148 Memory leak in scan method

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

EUVD-2026-70986

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

CVE-2026-13148

CVE-2026-13148 is a memory leak in the scan method of Softing smartLink (HW-PN), where memory is not released after its effective lifetime. This allows a resource leak exposure. The affected versions are from 1.04 before 1.10 . The vulnerability is rated CVSS 4.0 6.3 (MEDIUM) , with a HIGH impact...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC Disclaimer: This code is intended exclusively for educational purposes and authorized security testing. Unauthorized attacks against third-party systems are illegal. Vulnerability CVE-2025-26466 is a pre-authentication denial-of-service DoS vulnerability...

kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd

A flaw was found in the Linux kernel's trusted keys subsystem. A local user could exploit a memory leak in the tpm2loadcmd function, which fails to free a temporary memory allocation in certain error scenarios. This memory leak could lead to a system-wide Denial of Service DoS by exhausting...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: nfsd: fix posix_acl leak on SETACL decode failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

Linux Distros Unpatched Vulnerability : CVE-2026-80878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails. CVE-2026-80878 Note that Nessus relies on...

The vulnerability of the `mark_page_dirty_in_slot()` function in the `virt/kvm/kvm_main.c` module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c file of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...

Linux Distros Unpatched Vulnerability : CVE-2026-80784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during...

Linux Distros Unpatched Vulnerability : CVE-2026-80902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA When terminating DMA transfers, active descriptors are not properly reclaimed. Only cyclic...

The vulnerability of the renesas_i3c_i3c_xfers() function in the drivers/i3c/master/renesas-i3c.c file of the I3C driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the renesasi3ci3cxfers function in the drivers/i3c/master/renesas-i3c.c file of the I3C driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the qdisc_dequeue_drop() function in the include/net/sch_generic.h module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the qdiscdequeuedrop function in the include/net/schgeneric.h module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

The vulnerability of the require_uniform_address_uniform() function in the drivers/gpu/drm/vc4/vc4_validate_shaders.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote...

Linux Distros Unpatched Vulnerability : CVE-2026-80843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: fix xfrmstateconstruct auth-trunc leak attachauthtrunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected auth algorithm has no...

Linux Distros Unpatched Vulnerability : CVE-2026-80797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The...